diff --git a/alpine/hotspot/Dockerfile b/alpine/hotspot/Dockerfile
index 9f35ce57c2..a5a62acb19 100644
--- a/alpine/hotspot/Dockerfile
+++ b/alpine/hotspot/Dockerfile
@@ -41,7 +41,7 @@ RUN java_major_version="$(jlink --version 2>&1 | cut -c1-2)"; \
     fi
 
 # Jenkins version being bundled in this docker image
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 # Can be used to customize where jenkins.war get downloaded from
 ARG WAR_URL=https://get.jenkins.io/war/${JENKINS_VERSION}/jenkins.war
 
@@ -137,7 +137,7 @@ COPY jenkins-support /usr/local/bin/jenkins-support
 COPY jenkins.sh /usr/local/bin/jenkins.sh
 COPY jenkins-plugin-cli.sh /bin/jenkins-plugin-cli
 
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 ENV JENKINS_VERSION=${JENKINS_VERSION}
 
 ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/jenkins.sh"]
diff --git a/debian/Dockerfile b/debian/Dockerfile
index d74eb9285b..29fbec5e5c 100644
--- a/debian/Dockerfile
+++ b/debian/Dockerfile
@@ -1,7 +1,7 @@
 ARG TRIXIE_TAG=20251103
 
 ARG DEBIAN_RELEASE_LINE=trixie
-ARG DEBIAN_VERSION=20260623
+ARG DEBIAN_VERSION=20260713
 ARG DEBIAN_VARIANT="-slim"
 FROM debian:"${DEBIAN_RELEASE_LINE}-${DEBIAN_VERSION}${DEBIAN_VARIANT}" AS jre-and-war
 
@@ -45,7 +45,7 @@ RUN java_major_version="$(jlink --version 2>&1 | cut -c1-2)"; \
     fi
 
 # Jenkins version being bundled in this docker image
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 # Can be used to customize where jenkins.war get downloaded from
 ARG WAR_URL=https://get.jenkins.io/war/${JENKINS_VERSION}/jenkins.war
 
@@ -151,7 +151,7 @@ COPY jenkins-support /usr/local/bin/jenkins-support
 COPY jenkins.sh /usr/local/bin/jenkins.sh
 COPY jenkins-plugin-cli.sh /bin/jenkins-plugin-cli
 
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 ENV JENKINS_VERSION=${JENKINS_VERSION}
 
 ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/jenkins.sh"]
diff --git a/docker-bake.hcl b/docker-bake.hcl
index bbc4b9422a..88badf6351 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -12,7 +12,7 @@ variable "default_jdk" {
 }
 
 variable "JENKINS_VERSION" {
-  default = "2.572"
+  default = "2.573"
 }
 
 variable "WAR_URL" {
@@ -64,11 +64,11 @@ variable "DEBIAN_RELEASE_LINE" {
 }
 
 variable "DEBIAN_VERSION" {
-  default = 20260623
+  default = 20260713
 }
 
 variable "RHEL_TAG" {
-  default = "9.8-1782841664"
+  default = "9.8-1784004572"
 }
 
 variable "RHEL_RELEASE_LINE" {
diff --git a/make.ps1 b/make.ps1
index 855303f0a0..935d628618 100644
--- a/make.ps1
+++ b/make.ps1
@@ -4,7 +4,7 @@ Param(
     # Default script target
     [String] $Target = 'build',
     # Jenkins version to include
-    [String] $JenkinsVersion = '2.572',
+    [String] $JenkinsVersion = '2.573',
     # Windows flavor and windows version to build
     [String] $ImageType = 'windowsservercore-ltsc2022',
     # Generate a docker compose file even if it already exists
diff --git a/rhel/Dockerfile b/rhel/Dockerfile
index c2e07daef1..f534071add 100644
--- a/rhel/Dockerfile
+++ b/rhel/Dockerfile
@@ -1,4 +1,4 @@
-ARG RHEL_TAG=9.8-1782841664
+ARG RHEL_TAG=9.8-1784004572
 ARG RHEL_RELEASE_LINE=ubi9
 FROM registry.access.redhat.com/${RHEL_RELEASE_LINE}/ubi:${RHEL_TAG} AS jre-and-war
 
@@ -40,7 +40,7 @@ RUN java_major_version="$(jlink --version 2>&1 | cut -c1-2)"; \
     fi
 
 # Jenkins version being bundled in this docker image
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 # Can be used to customize where jenkins.war get downloaded from
 ARG WAR_URL=https://get.jenkins.io/war/${JENKINS_VERSION}/jenkins.war
 
@@ -141,7 +141,7 @@ COPY jenkins-support /usr/local/bin/jenkins-support
 COPY jenkins.sh /usr/local/bin/jenkins.sh
 COPY jenkins-plugin-cli.sh /bin/jenkins-plugin-cli
 
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 ENV JENKINS_VERSION=${JENKINS_VERSION}
 
 ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/jenkins.sh"]
diff --git a/tests/golden/expected_env_vars_except_hostname.txt b/tests/golden/expected_env_vars_except_hostname.txt
index 4403c8310c..f64f9caa03 100644
--- a/tests/golden/expected_env_vars_except_hostname.txt
+++ b/tests/golden/expected_env_vars_except_hostname.txt
@@ -6,7 +6,7 @@ JENKINS_INCREMENTALS_REPO_MIRROR=https://repo.jenkins-ci.org/incrementals
 JENKINS_SLAVE_AGENT_PORT=50000
 JENKINS_UC=https://updates.jenkins.io
 JENKINS_UC_EXPERIMENTAL=https://updates.jenkins.io/experimental
-JENKINS_VERSION=2.572
+JENKINS_VERSION=2.573
 LANG=C.UTF-8
 PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 PWD=/
diff --git a/tests/golden/expected_tags.txt b/tests/golden/expected_tags.txt
index 64e1a6d8b2..4ad83b0fce 100644
--- a/tests/golden/expected_tags.txt
+++ b/tests/golden/expected_tags.txt
@@ -1,17 +1,17 @@
-docker.io/jenkins/jenkins:2.572 (debian_jdk21)
-docker.io/jenkins/jenkins:2.572-alpine (alpine_jdk21)
-docker.io/jenkins/jenkins:2.572-alpine-jdk21 (alpine_jdk21)
-docker.io/jenkins/jenkins:2.572-alpine-jdk25 (alpine_jdk25)
-docker.io/jenkins/jenkins:2.572-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
-docker.io/jenkins/jenkins:2.572-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk21 (debian_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk21-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk21-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk25 (debian_jdk25)
-docker.io/jenkins/jenkins:2.572-jdk25-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk25)
-docker.io/jenkins/jenkins:2.572-jdk25-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk25)
-docker.io/jenkins/jenkins:2.572-rhel-ubi9-jdk21 (rhel_jdk21)
-docker.io/jenkins/jenkins:2.572-rhel-ubi9-jdk25 (rhel_jdk25)
-docker.io/jenkins/jenkins:2.572-slim (debian-slim_jdk21)
-docker.io/jenkins/jenkins:2.572-slim-jdk21 (debian-slim_jdk21)
-docker.io/jenkins/jenkins:2.572-slim-jdk25 (debian-slim_jdk25)
+docker.io/jenkins/jenkins:2.573 (debian_jdk21)
+docker.io/jenkins/jenkins:2.573-alpine (alpine_jdk21)
+docker.io/jenkins/jenkins:2.573-alpine-jdk21 (alpine_jdk21)
+docker.io/jenkins/jenkins:2.573-alpine-jdk25 (alpine_jdk25)
+docker.io/jenkins/jenkins:2.573-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
+docker.io/jenkins/jenkins:2.573-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk21 (debian_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk21-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk21-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk25 (debian_jdk25)
+docker.io/jenkins/jenkins:2.573-jdk25-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk25)
+docker.io/jenkins/jenkins:2.573-jdk25-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk25)
+docker.io/jenkins/jenkins:2.573-rhel-ubi9-jdk21 (rhel_jdk21)
+docker.io/jenkins/jenkins:2.573-rhel-ubi9-jdk25 (rhel_jdk25)
+docker.io/jenkins/jenkins:2.573-slim (debian-slim_jdk21)
+docker.io/jenkins/jenkins:2.573-slim-jdk21 (debian-slim_jdk21)
+docker.io/jenkins/jenkins:2.573-slim-jdk25 (debian-slim_jdk25)
diff --git a/tests/golden/expected_tags_latest_weekly.txt b/tests/golden/expected_tags_latest_weekly.txt
index 508b705783..70c21d4a20 100644
--- a/tests/golden/expected_tags_latest_weekly.txt
+++ b/tests/golden/expected_tags_latest_weekly.txt
@@ -1,22 +1,22 @@
-docker.io/jenkins/jenkins:2.572 (debian_jdk21)
-docker.io/jenkins/jenkins:2.572-alpine (alpine_jdk21)
-docker.io/jenkins/jenkins:2.572-alpine-jdk21 (alpine_jdk21)
-docker.io/jenkins/jenkins:2.572-alpine-jdk25 (alpine_jdk25)
-docker.io/jenkins/jenkins:2.572-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
-docker.io/jenkins/jenkins:2.572-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk21 (debian_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk21-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk21-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
-docker.io/jenkins/jenkins:2.572-jdk25 (debian_jdk25)
-docker.io/jenkins/jenkins:2.572-jdk25-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk25)
-docker.io/jenkins/jenkins:2.572-jdk25-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk25)
-docker.io/jenkins/jenkins:2.572-rhel-ubi9-jdk21 (rhel_jdk21)
-docker.io/jenkins/jenkins:2.572-rhel-ubi9-jdk25 (rhel_jdk25)
-docker.io/jenkins/jenkins:2.572-slim (debian-slim_jdk21)
-docker.io/jenkins/jenkins:2.572-slim-jdk21 (debian-slim_jdk21)
-docker.io/jenkins/jenkins:2.572-slim-jdk25 (debian-slim_jdk25)
-docker.io/jenkins/jenkins:2.572-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
-docker.io/jenkins/jenkins:2.572-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
+docker.io/jenkins/jenkins:2.573 (debian_jdk21)
+docker.io/jenkins/jenkins:2.573-alpine (alpine_jdk21)
+docker.io/jenkins/jenkins:2.573-alpine-jdk21 (alpine_jdk21)
+docker.io/jenkins/jenkins:2.573-alpine-jdk25 (alpine_jdk25)
+docker.io/jenkins/jenkins:2.573-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
+docker.io/jenkins/jenkins:2.573-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk21 (debian_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk21-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk21-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
+docker.io/jenkins/jenkins:2.573-jdk25 (debian_jdk25)
+docker.io/jenkins/jenkins:2.573-jdk25-hotspot-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk25)
+docker.io/jenkins/jenkins:2.573-jdk25-hotspot-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk25)
+docker.io/jenkins/jenkins:2.573-rhel-ubi9-jdk21 (rhel_jdk21)
+docker.io/jenkins/jenkins:2.573-rhel-ubi9-jdk25 (rhel_jdk25)
+docker.io/jenkins/jenkins:2.573-slim (debian-slim_jdk21)
+docker.io/jenkins/jenkins:2.573-slim-jdk21 (debian-slim_jdk21)
+docker.io/jenkins/jenkins:2.573-slim-jdk25 (debian-slim_jdk25)
+docker.io/jenkins/jenkins:2.573-windowsservercore-ltsc2022 (windowsservercore-ltsc2022_jdk21)
+docker.io/jenkins/jenkins:2.573-windowsservercore-ltsc2025 (windowsservercore-ltsc2025_jdk21)
 docker.io/jenkins/jenkins:alpine (alpine_jdk21)
 docker.io/jenkins/jenkins:alpine-jdk21 (alpine_jdk21)
 docker.io/jenkins/jenkins:alpine-jdk25 (alpine_jdk25)
diff --git a/tests/test_helpers.psm1 b/tests/test_helpers.psm1
index f025b4eb55..6d0546139f 100644
--- a/tests/test_helpers.psm1
+++ b/tests/test_helpers.psm1
@@ -66,7 +66,6 @@ function Retry-Command {
 }
 
 function Get-SutImage {
-    # TODO: don't hardcode Windows flavor
     $DOCKERFILE = 'windows/windowsservercore/hotspot/Dockerfile'
     $IMAGETAG = Get-EnvOrDefault 'CONTROLLER_TAG' ''
 
diff --git a/windows/windowsservercore/hotspot/Dockerfile b/windows/windowsservercore/hotspot/Dockerfile
index 578c43d4bf..fc1782fd1b 100644
--- a/windows/windowsservercore/hotspot/Dockerfile
+++ b/windows/windowsservercore/hotspot/Dockerfile
@@ -53,7 +53,7 @@ RUN New-Item -ItemType Directory -Path C:/temp | Out-Null ; `
     Remove-Item -Path C:\temp -Recurse | Out-Null
 
 # Jenkins version being bundled in this docker image
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 # Can be used to customize where jenkins.war get downloaded from
 ARG WAR_URL=https://get.jenkins.io/war/${JENKINS_VERSION}/jenkins.war
 ENV WAR_URL=${WAR_URL}
@@ -68,8 +68,8 @@ RUN New-Item -ItemType Directory -Path C:/war | Out-Null ; `
 COPY jenkins.io-2026.key /war/jenkins-key.pub
 
 RUN & 'C:/Program Files/GnuPG/bin/gpg.exe' --version ; `
-    & 'C:/Program Files/GnuPG/bin/gpg.exe' --import C:/war/jenkins-key.pub ; `
-    & 'C:/Program Files/GnuPG/bin/gpg.exe' --verify --trust-model direct C:/war/jenkins.war.asc C:/war/jenkins.war
+    & 'C:/Program Files/GnuPG/bin/gpg.exe' --dearmor --output C:/war/jenkins-key.pgp C:/war/jenkins-key.pub ; `
+    & 'C:/Program Files/GnuPG/bin/gpgv.exe' --keyring C:/war/jenkins-key.pgp C:/war/jenkins.war.asc C:/war/jenkins.war
 
 FROM mcr.microsoft.com/windows/servercore:"${WINDOWS_VERSION}" AS controller
 
@@ -145,7 +145,7 @@ COPY jenkins.ps1 C:/ProgramData/Jenkins
 # See https://github.com/jenkinsci/plugin-installation-manager-tool#cli-options for information on parameters for jenkins-plugin-cli.ps1 for installing plugins into the docker image
 COPY jenkins-plugin-cli.ps1 C:/ProgramData/Jenkins
 
-ARG JENKINS_VERSION=2.572
+ARG JENKINS_VERSION=2.573
 ENV JENKINS_VERSION=${JENKINS_VERSION}
 
 ENTRYPOINT ["powershell.exe", "-f", "C:/ProgramData/Jenkins/jenkins.ps1"]