2023 top routinely exploited vulnerabilities

This joint advisory from CISA, FBI, NSA and partner agencies summarizes the most routinely exploited vulnerabilities in 2023—highlighting an increase in zero-day exploitation—and lists the top affected products (e.g., Citrix NetScaler, Fortinet FortiOS, Progress MOVEit, Apache Log4j, Microsoft Netlogon, Atlassian Confluence). It provides technical descriptions of the top CVEs, patch and mitigation guidance for vendors and end users, and recommended security practices (secure-by-design, centralized patch management, EDR, MFA, and Zero Trust) to reduce risk.