PAN-OS GlobalProtect Authentication Bypass Suspicious Activity (CVE-2026-0257)

Detects generic anomalous authentication or unexpected session creation indicative of an authentication bypass vulnerability (CVE-2026-0257) in PAN-OS GlobalProtect. Needs specific endpoint/URI tuning based on actual CVE details once available.