A cybersecurity analyst at an e-commerce company is evaluating the responses from the bug bounty program. One of the reports submitted claims to have found a serious vulnerability that could allow an authenticated user to access other users' shopping cart details. What should be the analyst's FIRST action upon receiving this report?
Disclose the vulnerability details to all stakeholders
Notify all users about the potential security breach
Apply an immediate patch to address the vulnerability
Attempt to replicate the reported vulnerability in a controlled environment