Definition

Vulnerability

A weakness, susceptibility or flaw in a product that can be exploited by a cyber threat.

A weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat. The CRA distinguishes an exploitable vulnerability (one that has the potential to be effectively used by an adversary under practical operational conditions) from an actively exploited vulnerability (one for which there is reliable evidence of exploitation). Only the last triggers Article 14 reporting; all of them are subject to vulnerability handling.

Reference: Art. 3(40)–(42) · Regulation (EU) 2024/2847 on EUR-Lex

Updated 2026-09-12 · Paraphrase for orientation, not legal advice.