ENISA Launched the CRA Single Reporting Platform for Actively Exploited Vulnerabilities

ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities

The EU Agency for Cybersecurity switched on the Cyber Resilience Act‘s Single Reporting Platform on 11 September 2026, the same day the law’s reporting obligations started binding manufacturers. ENISA built the tool and runs its day-to-day operations, a job Article 16(1) of the CRA hands to the agency. Anyone placing a product with digital elements on the EU market now reports actively exploited vulnerabilities and severe incidents through that …

EU Cyber Resilience Act Reporting Requirements Take Effect

The Cyber Resilience Act, formally Regulation (EU) 2024/2847, sits within the EU's framework for products with digital elements, per the European Commission's policy overview . The regulation's binding provisions are set out in the official journal, published on EUR-Lex .Read more...

ENISA launches Single Reporting Platform as EU Cyber Resilience Act vulnerability reporting obligations take effect

The EU Agency for Cybersecurity (ENISA) deployed the initial operating capability of the Single Reporting Platform (SRP). The agency developed, operates and maintains the online tool to enable manufacturers and open-source software stewards to meet their new Cyber Resilience Act (CRA) reporting obligations for actively exploited vulnerabilities and severe incidents. Designed to support effective vulnerability