Inbound Network Connection to PAN-OS User-ID Authentication Portal Ports

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•9

Detects inbound network connections from external, non-private IP addresses to local ports 6081 and 6082. These ports are used by the PAN-OS User-ID Authentication Portal, which is actively targeted by CVE-2026-0300.