If Qualys is flagging 7-Zip 26.02, the best solution is to upgrade to the latest version as soon as a patched release is available. Until then, avoid opening XZ or RAR5 archives from untrusted sources, and consider temporarily blocking those file types in your environment. If an updated version has already been released, updating should resolve the vulnerability findings after rescanning.