SolarWinds has patched a hard-coded key that let unauthenticated attackers run code in Access Rights Manager.
The denial of service bug in SolarWinds Serv-U requires no authentication and has been observed under active attack, prompting a…