EU CRA Article 14 took effect on September 11, 2026. If you place a product with digital elements on the EU market, you now have 24 hours to file an early warning once an actively exploited vulnerability is confirmed. Here is the runbook - what to file, where to register, and the ten questions to answer before the clock starts.