Magento patch released 14th May 2015.

To check which sites need patching use the following grep command:

grep -L "_validateControllerInstance" /home/*/public_html/app/code/core/Mage/Core/Controller/Varien/Router/Admin.php