diff --git a/charts/camunda-platform-8.8/README.md b/charts/camunda-platform-8.8/README.md
index 637b7c220c..2788534572 100644
--- a/charts/camunda-platform-8.8/README.md
+++ b/charts/camunda-platform-8.8/README.md
@@ -719,7 +719,7 @@ Please see the corresponding [release guide](../../docs/release.md) to find out
 | `identityKeycloak.nameOverride`                                                         | the name used for Keycloak.                                                                                                                                                                                                                                                                              | `keycloak`                                                                               |
 | `identityKeycloak.image`                                                                | configuration.                                                                                                                                                                                                                                                                                           |                                                                                          |
 | `identityKeycloak.image.repository`                                                     | image repo                                                                                                                                                                                                                                                                                               | `camunda/keycloak`                                                                       |
-| `identityKeycloak.image.tag`                                                            | image tag                                                                                                                                                                                                                                                                                                | `26.1.4`                                                                                 |
+| `identityKeycloak.image.tag`                                                            | image tag                                                                                                                                                                                                                                                                                                | `26.3.1`                                                                                 |
 | `identityKeycloak.image.digest`                                                         | can be used to set image digest (overrides tag if set, e.g. "sha256:abcd...")                                                                                                                                                                                                                            | `""`                                                                                     |
 | `identityKeycloak.resources`                                                            | configuration of resource requests and limits for the container, see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits                                                                                                                                  |                                                                                          |
 | `identityKeycloak.resources.requests.cpu`                                               |                                                                                                                                                                                                                                                                                                          | `1000m`                                                                                  |
diff --git a/charts/camunda-platform-8.8/test/unit/common/golden/keycloak-statefulset.golden.yaml b/charts/camunda-platform-8.8/test/unit/common/golden/keycloak-statefulset.golden.yaml
index bddcfca6e7..285d33e9b3 100644
--- a/charts/camunda-platform-8.8/test/unit/common/golden/keycloak-statefulset.golden.yaml
+++ b/charts/camunda-platform-8.8/test/unit/common/golden/keycloak-statefulset.golden.yaml
@@ -61,7 +61,7 @@ spec:
       enableServiceLinks: true
       initContainers:
         - name: prepare-write-dirs
-          image: docker.io/camunda/keycloak:26.1.4
+          image: docker.io/camunda/keycloak:26.3.1
           imagePullPolicy: IfNotPresent
           command:
             - /bin/bash
@@ -103,7 +103,7 @@ spec:
              mountPath: /emptydir
       containers:
         - name: keycloak
-          image: docker.io/camunda/keycloak:26.1.4
+          image: docker.io/camunda/keycloak:26.3.1
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/charts/camunda-platform-8.8/values.schema.json b/charts/camunda-platform-8.8/values.schema.json
index 111c04c529..348a4fe0be 100644
--- a/charts/camunda-platform-8.8/values.schema.json
+++ b/charts/camunda-platform-8.8/values.schema.json
@@ -1828,7 +1828,7 @@
                         "tag": {
                             "type": "string",
                             "description": "image tag",
-                            "default": "26.1.4"
+                            "default": "26.3.1"
                         },
                         "digest": {
                             "type": "string",
diff --git a/charts/camunda-platform-8.8/values.yaml b/charts/camunda-platform-8.8/values.yaml
index 8f3049f946..cc814c19f5 100755
--- a/charts/camunda-platform-8.8/values.yaml
+++ b/charts/camunda-platform-8.8/values.yaml
@@ -968,7 +968,7 @@ identityKeycloak:
     ## @param identityKeycloak.image.repository image repo
     repository: camunda/keycloak
     ## @param identityKeycloak.image.tag image tag
-    tag: 26.1.4
+    tag: 26.3.1
     ## @param identityKeycloak.image.digest can be used to set image digest (overrides tag if set, e.g. "sha256:abcd...")
     digest: ""