Not yet released. No release has shipped, so this exact page isn’t generated by a live case yet. The format is real, though: this is rendered by walking the eu-cra-art14 ruleset version 2026.09.1’s field list in portal order, the same way the real package generator will. The timing (awareness time, due date) is the basic-aev case from the server repo’s golden fixture, used elsewhere on this site to test the deadline math. The manufacturer, product and vulnerability details are an illustrative scenario, since the fixture only carries timing, not case content.

Early Warning package

Case opened as an Actively Exploited Vulnerability. Aware 10 January 2026, 09:00 UTC. Early Warning due 11 January 2026, 09:00 UTC (24 hours later).

Common fields

Notification type (Vulnerability/Incident): Vulnerability
Title: Actively exploited path traversal in the Nimbus Edge Gateway TLS termination module
Summary: An authentication bypass in the TLS termination module (libnimbus-tls 1.2.0) lets a remote attacker read arbitrary files by sending a crafted SNI value. Exploitation has been observed in the wild against internet-facing gateways.
Manufacturer name: Nimbus Sensors GmbH
Member States where product available (Concerned CSIRT): Germany, France, Netherlands
Product Name: Nimbus Edge Gateway
Product Version: 3.4.1
End of support indicator: No
Component name: libnimbus-tls

Actively Exploited Vulnerability

CVE ID: CVE-2026-41234
EUVD ID: EUVD-2026-41234
Date and time when you become aware of the Actively Exploited Vulnerability: 10 January 2026, 09:00 UTC

This is what you’d paste into ENISA’s Single Reporting Platform, one section at a time, at the 24-hour Early Warning stage. The 72-hour Notification and Final Report packages carry these same fields forward and add the ones that stage requires. See the Article 14 cheat sheet for the full stage list.