Coordinated report submitted through a national CERT. Context This section documents a real-world case of responsible security disclosure involving a public-sector system in Spain. The finding was identified through non-intrusive analysis and reported via an official channel, following the principles…