---
title: Tip: triage Oct 2026 Junos fixes by J-Web exposure, MX IKE, Secure-ZTP, and SecIntel feeds first | ctxsec
url: https://ctxsec.com/items/tip-juniper-oct-2026-triage
description: ""
status: "tip"
published: 2026-10-14
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-juniper-oct-2026-triage.md)

tip

2026-10-14

### Tip: triage Oct 2026 Junos fixes by J-Web exposure, MX IKE, Secure-ZTP, and SecIntel feeds first

Upgrade to a listed patched Junos / Junos Evolved train (e.g. 25.2R2-S2, 25.4R1-S3, 26.2R1-S2 or the 23.2/23.4/24.x respins in the advisories). Until then: disable or lock down internet-reachable J-Web (CVE-2026-101954), restrict who can send IKE certificate traffic to MX management/VPN paths (CVE-2026-102182), avoid untrusted DHCP on Secure-ZTP-capable gear (CVE-2026-102061), and verify Security Intelligence HTTPS feed servers on SRX (CVE-2026-102062). Inventory with `show version` and whether `system services web-management` is enabled.

Sources: [CVE-2026-101954](https://www.cve.org/CVERecord?id=CVE-2026-101954) · [CVE-2026-102182](https://www.cve.org/CVERecord?id=CVE-2026-102182) · [Juniper JSA112187](https://supportportal.juniper.net/JSA112187)