How did you handle a situation where you identified a significant vulnerability during your vulnerability scanning activities?