New Options Profiles for Log4Shell Detection | Qualys
Summary: Qualys added two pre-configured option profiles to its library for detecting Log4Shell: Log4Shell – Authenticated Scan and Log4Shell – Unauthenticated Scan, both importable via Scans > Option Profiles > New and tuned to quickly detect the vulnerability. The profiles carry pre-defined search lists of Log4Shell QIDs, set scan performance to Normal, and Qualys recommends making the profile Global so it is available to all users in the subscription.
What's compelling: Log4Shell detection depends on running the right QIDs against every host, and Qualys notes these profiles default to Normal scan performance, which it says to change if performance impact is a concern. A profile left unshared or unimported means assets get scanned without the Log4Shell checks at all.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026