How would you approach a scenario where you discover a critical vulnerability during a live test that could potentially impact customer data?