The EU Cyber Resilience Act's Article 14 reporting framework requires a detailed technical notification within 72 hours of awareness and a final report within 14 days of a corrective measure becoming available