1. A method for managing network vulnerabilities, comprising: transmitting a callback from a network controller and to a network element, wherein the callback comprises executable code configured to cause the network element to transmit a filesystem manifest to the network controller; obtaining, in response to executing the callback on the network element, image data from the filesystem manifest, wherein the image data identifies a filesystem key in the filesystem manifest that corresponds to a first software container among a plurality of software containers, and wherein the plurality of software containers are virtualized user-space instances operating on a single kernel in the network element; determining, using the filesystem key that is identified from the image data, a first software vulnerability of a first software image, the first software image being used to generate the first software container; generating, using the first software vulnerability and the filesystem key, a vulnerability map of a network, wherein the vulnerability map describes a plurality of software vulnerabilities arranged according to a plurality of filesystem keys used on the network.