External Connection to PAN-OS Portal (CVE-2026-0300)

Thiru N@Iamthiru

•updated May 7, 2026•6•1•325

Detects inbound network connections from external, non-private IP addresses to local ports 6081 and 6082. These ports are used by the PAN-OS User-ID Authentication Portal, which is actively targeted by CVE-2026-0300.