Apache has patched a critical remote code-execution vulnerability in Struts 2, and users should update immediately.
Source: Threadpost