Since 11 September 2026, CRA Article 14 requires a 24-hour early warning for exploited flaws. The form is easy. Knowing you are aware is not.