How would you approach a situation where you discover a significant vulnerability in a critical system?