If the VMs are Ubuntu or debian, for example, then there is the unattended-upgrades module, which has a configuration file at /etc/apt/apt.conf.d/50unattended-upgrades
https://wiki.debian.org/UnattendedUpgrades
But yes, as LnxBil says, it will be a per-distro thing. You could always write...