From 11 September 2026, the EU Cyber Resilience Act ("CRA") will require manufacturers to report actively exploited ...