Shortly after the authentication-bypass flaw was disclosed multiple proof-of-concept exploits appeared, and one researcher claims there's been zero-day activity for at least a month.
Exploit Cyber-Frenzy Threatens Millions via Critical cPanel Vulnerability
Summary + source link. No paywalls, no tracking.