If you discovered a vulnerability in a system, what steps would you take to address it?

Situational