Y Soft Opens Vulnerability Reporting Channel Under the EU Cyber Resilience Act
From 11th September 2026, anyone — you, your customers, or independent security researchers — can report a suspected vulnerability in a Y Soft product directly to us. It's part of our response to the EU Cyber Resilience Act (CRA), in force since 11th September 2026: Y Soft must now report actively exploited vulnerabilities to ENISA within 24 hours, and file a full report within 72. We built the process to meet that deadline — and opened it to everyone, not just regulators.
Sep 22, 2026