• UL Solutions flagged a Sept. 11 start for EU Cyber Resilience Act reporting by manufacturers of connected products.
• Rules require reporting actively exploited vulnerabilities or severe incidents for products already on the EU market, potentially including in-development products.
• Early warning due within 24 hours of awareness; full notification due within 72 hours via the CRA Single Reporting Platform.
• Non-compliance risk cited at up to EUR 15 million or 2.5% of worldwide annual turnover, whichever is higher.
• Full CRA application set for Dec. 11, 2027; manufacturers urged to strengthen vulnerability management, software supply chain security, governance.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. UL Solutions Inc. published the original content used to generate this news brief on September 09, 2026, and is solely responsible for the information contained therein.