CVE-2020-7980: Intelliantech Aptus Web

Critical severity, CVSS 9.8. EPSS: 82.5% chance of exploitation in the next 30 days.

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

Affected products

• Intelliantech Aptus Web: version 1.24 only

Published 2020-01-25. Last modified 2026-06-17.