CVE-2026-73184 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting Global Gallery versions up to 11.1.2. The vulnerability allows remote attackers to execute arbitrary scripts in the context of the affected application without requiring authentication. The CVSS 3.1 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or remediation information is currently provided.

Successful exploitation can lead to execution of arbitrary scripts in users' browsers, potentially resulting in data theft, session hijacking, or other impacts on confidentiality, integrity, and availability of the application. The vulnerability does not require authentication, increasing the risk of exploitation. However, user interaction is required for the attack to succeed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider applying web application firewall (WAF) rules to detect and block XSS payloads targeting Global Gallery. Avoid exposing vulnerable interfaces publicly if possible.