What are the chances that the exploit is actually in 5.x, and the "anti-sec movement" is doing some social engineering to get people to upgrade to the affected versions?
Of course if this is the case then the exploit is likely to be used aggressively sometime in the near future...