During the deployment of a new customer portal, a critical security vulnerability is discovered in production that is actively being exploited. The project manager needs a fix deployed within hours, but the organization's normal release process requires a full regression cycle and a scheduled maintenance window three days away. Which release approach is MOST appropriate to address this situation while maintaining governance?