Upgrade to a listed patched Junos / Junos Evolved train (e.g. 25.2R2-S2, 25.4R1-S3, 26.2R1-S2 or the 23.2/23.4/24.x respins in the advisories). Until then: disable or lock down internet-reachable J-Web (CVE-2026-101954), restrict who can send IKE certificate traffic to MX management/VPN paths (CVE-2026-102182), avoid untrusted DHCP on Secure-ZTP-capable gear (CVE-2026-102061), and verify Security Intelligence HTTPS feed servers on SRX (CVE-2026-102062). Inventory with `show version` and whether `system services web-management` is enabled.