Failure to comply with the EU Cyber Resilience Act's Article 14 reporting requirements carries administrative fines of up to €15 million or 2.5% of a company's global annual turnover, whichever is higher

From the articleEU Cyber Resilience Act Goes Live: Manufacturers Now Face 24-Hour Deadline to Report Exploited Flaws