Critical finding

A finding that usually blocks release under default policy.

Why it matters

Indicates serious break or exposure.

Example

Unchecked refund action from chat.