Apache Struts 2 needs patching, without delay. It's under attack now

Black hats testing remote code execution zero-day vulnerability

Infosec researchers have found a "dire" zero-day in Apache Struts 2, and it's under active attack."