CLAIM-2026-08-10-10

Cyber Resilience Act Article 13(5) requires that 'Manufacturers shall exercise due diligence when integrating components sourced from third parties so that those components do not compromise the cybersecurity of the product with digital elements, including when integrating components of free and open-source software that have not been made available on the market in the course of a commercial activity.' Article 13(6) requires a manufacturer to report a vulnerability identified in an integrated component, including an open-source component.

Sources

• europeancyb2024article