CRAguard Blog https://craguard.eu/blog The EU Cyber Resilience Act for small software and device makers. en CRA reporting starts 11 September 2026: what a small software vendor should do this week https://craguard.eu/blog/cra-reporting-11-september-2026 https://craguard.eu/blog/cra-reporting-11-september-2026 Wed, 02 Sep 2026 00:00:00 GMT From 11 September 2026 you must report actively exploited vulnerabilities within 24 hours — including for products you already sell. A practical checklist for small companies.