A security vulnerability (CVE-2026-18788) has been identified in Trippo ResponsiveFilemanager versions up to 9.14.0. The flaw exists in an unknown function within the filemanager/dialog.php file and allows unrestricted file upload. The vulnerability can be exploited remotely, and a public proof-of-concept exploit has already been released, increasing the risk of active exploitation. The vendor was notified but did not respond to the disclosure. The affected product is no longer maintained or supported by its developer, meaning no official patch or fix is expected. This end-of-life status combined with a public exploit makes this a significant risk for any installations still in use.