PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.
paloaltonetworks pan-os 9.0.0