Answer in brief
CVE-2026-80114 records a Unknown severity vulnerability in PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys. The current sources do not mark it as known exploited. The current feed maps PassMark Software/BurnInTest (generic), PassMark Software/OSForensics (generic), PassMark Software/PerformanceTest (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps PassMark Software/BurnInTest (generic), PassMark Software/OSForensics (generic), PassMark Software/PerformanceTest (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| PassMark Software/BurnInTestgeneric | >=0 <11.1 build 1000 | 11.1 build 1000 |
| PassMark Software/OSForensicsgeneric | >=0 <11.1 build 1016 | 11.1 build 1016 |
| PassMark Software/PerformanceTestgeneric | >=0 <11.1 build 1012 | 11.1 build 1012 |
Published upstream
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 4, 2026
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectIo64.sys that allows local attackers to perform arbitrary physical memory writes by extracting an 8-byte key embedded as a hardcoded literal in the distributed binary and computing valid MD5 authentication tags for arbitrary IOCTL write requests. Attackers can additionally bypass a secondary validation gate by using the driver's own bit-clear IOCTL to clear a single bit in the gating instruction's displacement byte, causing all subsequent write requests to skip MAC verification, size checks, and Vendor ID checks entirely.
Quoted source text, attributed separately from HOL analysis.