Enhance Security with Software Composition Analysis & VMD | Qualys

Summary: Qualys announced the integration of Software Composition Analysis into its VMDR platform, using the Qualys Agent to scan open-source and commercial components across languages including Java, Go, .NET, Python, Node JS, Rust, Ruby, and PHP. The post states vulnerabilities weaponize 24 days faster than they are remediated on average, and that Qualys covers 92% of the CISA KEV catalog with an average response time under 17 hours for critical and Zero-Day vulnerabilities.
What's compelling: The post's own figure - vulnerabilities weaponized 24 days before remediation on average - sets the gap your patch cadence is running against, and a reader comment on the same page reports SCA is not visible in their Qualys instance, so verify the capability is actually live in your deployment before counting on it.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026