So it seems like it was rather easy for an IT security professional to create an exploit within 24h of the disclosure. Not sure if every script kiddy can do it, but this means that there are certainly malicious people/organizations who can.

Ultimately, it seems to me that the only real choice is to patch our (public) systems ASAP these days.