CVE-2026-41940 cPanel/WHM CVSS 9.8 auth bypass — was a zero-day for 60 days before patching. Anyone seeing active exploitation evidence in their logs?

CVE-2026-41940 cPanel/WHM CVSS 9.8 auth bypass — was a zero-day for 60 days before patching. Anyone seeing active exploitation evidence in their logs?