Art. 14(1)

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (2)

PER-0002 BackdoorST0005
addresses
moderate
derived
Manufacturer obligation to notify actively exploited vulnerabilities applies to discovered backdoors in the product, ensuring authorities and downstream defenders learn of the issue.
REC-0008.03 Known VulnerabilitiesST0001
addresses
moderate
derived
Manufacturer obligation to notify actively-exploited vulnerabilities is the procedural escalation lever that ensures known-but-exploited vulnerability information reaches authorities and downstream defenders quickly.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.