Legal & RegulatoryEvent: September 8, 2026
Cloudsmith notes that the CRA's reporting obligations start on September 11, requiring manufacturers to report actively exploited vulnerabilities to ENISA within 24 hours.
Published
Signal category
Legal & Regulatory
Quote
“The CRA's reporting obligations start on September 11. From that date, manufacturers have 24 hours to report an actively exploited vulnerability to ENISA.”
— Cloudsmith team
Company
Cloudsmith
Simply the world’s best cloud-native artifact management platform.
- Industry
- Software Development
- Location
- 7 Donegall Square West, GB
- Company size
- 164 employees
Cloudsmith is a fully managed solution for controlling, securing, and distributing everything that flows through your software supply chain, using the best of cloud-native artifact management. Operate at enterprise scale, reduce risk, and streamline builds. Cloudsmith just works, so your developers can, too.
Founded 2016