diff --git a/deploy-manage/deploy/cloud-enterprise/default-system-deployment-versions.md b/deploy-manage/deploy/cloud-enterprise/default-system-deployment-versions.md
index 21dae15604..203f7978e8 100644
--- a/deploy-manage/deploy/cloud-enterprise/default-system-deployment-versions.md
+++ b/deploy-manage/deploy/cloud-enterprise/default-system-deployment-versions.md
@@ -16,8 +16,10 @@ Note that since version 2.7.0, system deployments are automatically upgraded whe
 
 | {{ece}} version | Admin cluster | Logging & Metrics cluster | Security cluster |
 | --- | --- | --- | --- |
+| 4.0.2 | 8.18.8 | 8.18.8 | 8.18.8 |
 | 4.0.1 | 8.18.2 | 8.18.2 | 8.18.2 |
 | 4.0.0 | 8.18.0 | 8.18.0 | 8.18.0 |
+| 3.8.2 | 8.17.10 | 8.17.10 | 8.17.10 |
 | 3.8.1 | 8.17.4 | 8.17.4 | 8.17.4 |
 | 3.8.0 | 8.17.4 | 8.17.4 | 8.17.4 |
 | 3.7.3 | 7.17.24 | 7.17.24 | 8.15.2 |
diff --git a/deploy-manage/deploy/cloud-enterprise/ece-install-offline-images.md b/deploy-manage/deploy/cloud-enterprise/ece-install-offline-images.md
index b99280bfc6..7d0ed30404 100644
--- a/deploy-manage/deploy/cloud-enterprise/ece-install-offline-images.md
+++ b/deploy-manage/deploy/cloud-enterprise/ece-install-offline-images.md
@@ -17,13 +17,13 @@ The first table contains the stack versions shipped with the current {{version.e
 | Docker images included with {{ece}} {{version.ece}} |
 | --- |
 | docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}} |
-| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2 |
-| docker.elastic.co/cloud-release/kibana-cloud:8.18.2 |
-| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2 |
-| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2 |
-| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1 |
-| docker.elastic.co/cloud-release/kibana-cloud:9.0.1 |
-| docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1 |
+| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8 |
+| docker.elastic.co/cloud-release/kibana-cloud:8.18.8 |
+| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8 |
+| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8 |
+| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8 |
+| docker.elastic.co/cloud-release/kibana-cloud:9.0.8 |
+| docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8 |
 
 $$$ece-all-stacks$$$Additional {{stack}} versions are available as Docker images that you can use with ECE. For offline installations, you need to download both the {{stack}} pack and the Docker images for the same version.
 
@@ -173,11 +173,11 @@ Enterprise Search is not available in versions 9.0+.
 | docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8 | ECE 3.0.0 |
 | docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8 | ECE 3.0.0 |
 |  |  |
-| [{{es}}, {{kib}}, APM, and Enterprise Search stack pack: 8.18.7](https://download.elastic.co/cloud-enterprise/versions/8.18.7.zip) | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
-| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.7 | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
-| docker.elastic.co/cloud-release/kibana-cloud:8.18.7 | ECE 3.0.0 |
-| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.7 | ECE 3.0.0 |
-| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.7 | ECE 3.0.0 |
+| [{{es}}, {{kib}}, APM, and Enterprise Search stack pack: 8.18.8](https://download.elastic.co/cloud-enterprise/versions/8.18.8.zip) | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
+| docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8 | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
+| docker.elastic.co/cloud-release/kibana-cloud:8.18.8 | ECE 3.0.0 |
+| docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8 | ECE 3.0.0 |
+| docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8 | ECE 3.0.0 |
 |  |  |
 | [{{es}}, {{kib}}, APM, and Enterprise Search stack pack: 8.18.6](https://download.elastic.co/cloud-enterprise/versions/8.18.6.zip) | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
 | docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.6 | ECE 3.0.0<br>(+ Docker 20.10.10+ required for 8.16+) |
diff --git a/deploy-manage/deploy/cloud-enterprise/ece-install-offline-no-registry.md b/deploy-manage/deploy/cloud-enterprise/ece-install-offline-no-registry.md
index c9301e208b..3e5c0683ac 100644
--- a/deploy-manage/deploy/cloud-enterprise/ece-install-offline-no-registry.md
+++ b/deploy-manage/deploy/cloud-enterprise/ece-install-offline-no-registry.md
@@ -19,13 +19,13 @@ To perform an offline installation without a private Docker registry, you have t
 
     ```sh subs=true
     docker pull docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
-    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2
-    docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.2
-    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2
-    docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2
-    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1
-    docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.1
-    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1
+    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8
+    docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.8
+    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8
+    docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8
+    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8
+    docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.8
+    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8
     ```
 
     ::::{note}
@@ -36,13 +36,13 @@ To perform an offline installation without a private Docker registry, you have t
 
     ```sh subs=true
     docker save -o ece.{{version.ece}}.tar docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
-    docker save -o es.8.18.2.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2
-    docker save -o kibana.8.18.2.tar docker.elastic.co/cloud-release/kibana-cloud:8.18.2
-    docker save -o apm.8.18.2.tar docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2
-    docker save -o enterprise-search.8.18.2.tar docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2
-    docker save -o es.9.0.1.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1
-    docker save -o kibana.9.0.1.tar docker.elastic.co/cloud-release/kibana-cloud:9.0.1
-    docker save -o apm.9.0.1.tar docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1
+    docker save -o es.8.18.2.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8
+    docker save -o kibana.8.18.2.tar docker.elastic.co/cloud-release/kibana-cloud:8.18.8
+    docker save -o apm.8.18.2.tar docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8
+    docker save -o enterprise-search.8.18.2.tar docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8
+    docker save -o es.9.0.1.tar docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8
+    docker save -o kibana.9.0.1.tar docker.elastic.co/cloud-release/kibana-cloud:9.0.8
+    docker save -o apm.9.0.1.tar docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8
     ```
 
 3. Copy the .tar files to a location on your network where they are available to each host where you plan to install {{ece}}. Alternatively, you can copy the .tar files to each host directly.
@@ -50,13 +50,13 @@ To perform an offline installation without a private Docker registry, you have t
 
     ```sh subs=true
     docker load < FILE_PATH/ece.{{version.ece}}.tar
-    docker load < FILE_PATH/es.8.18.2.tar
-    docker load < FILE_PATH/kibana.8.18.2.tar
-    docker load < FILE_PATH/apm.8.18.2.tar
-    docker load < FILE_PATH/enterprise-search.8.18.2.tar
-    docker load < FILE_PATH/es.9.0.1.tar
-    docker load < FILE_PATH/kibana.9.0.1.tar
-    docker load < FILE_PATH/apm.9.0.1.tar
+    docker load < FILE_PATH/es.8.18.8.tar
+    docker load < FILE_PATH/kibana.8.18.8.tar
+    docker load < FILE_PATH/apm.8.18.8.tar
+    docker load < FILE_PATH/enterprise-search.8.18.8.tar
+    docker load < FILE_PATH/es.9.0.8.tar
+    docker load < FILE_PATH/kibana.9.0.8.tar
+    docker load < FILE_PATH/apm.9.0.8.tar
     ```
 
 5. Optional: Remove the .tar files after installation.
diff --git a/deploy-manage/deploy/cloud-enterprise/ece-install-offline-with-registry.md b/deploy-manage/deploy/cloud-enterprise/ece-install-offline-with-registry.md
index 1e668e9351..f42faef372 100644
--- a/deploy-manage/deploy/cloud-enterprise/ece-install-offline-with-registry.md
+++ b/deploy-manage/deploy/cloud-enterprise/ece-install-offline-with-registry.md
@@ -25,13 +25,13 @@ Installing ECE on multiple hosts with your own registry server is simpler, becau
 
     ```sh subs=true
     docker pull docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
-    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2
-    docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.2
-    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2
-    docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2
-    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1
-    docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.1
-    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1
+    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.8
+    docker pull docker.elastic.co/cloud-release/kibana-cloud:8.18.8
+    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.8
+    docker pull docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.8
+    docker pull docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.8
+    docker pull docker.elastic.co/cloud-release/kibana-cloud:9.0.8
+    docker pull docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.8
     ```
 
     ::::{note}
@@ -42,26 +42,26 @@ Installing ECE on multiple hosts with your own registry server is simpler, becau
 
     ```sh subs=true
     docker tag docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}} REGISTRY/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
-    docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2 REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.2
-    docker tag docker.elastic.co/cloud-release/kibana-cloud:8.18.2 REGISTRY/cloud-release/kibana-cloud:8.18.2
-    docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2 REGISTRY/cloud-release/elastic-agent-cloud:8.18.2
-    docker tag docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2 REGISTRY/cloud-release/enterprise-search-cloud:8.18.2
-    docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1 REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.1
-    docker tag docker.elastic.co/cloud-release/kibana-cloud:9.0.1 REGISTRY/cloud-release/kibana-cloud:9.0.1
-    docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1 REGISTRY/cloud-release/elastic-agent-cloud:9.0.1
+    docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:8.18.2 REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.8
+    docker tag docker.elastic.co/cloud-release/kibana-cloud:8.18.2 REGISTRY/cloud-release/kibana-cloud:8.18.8
+    docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:8.18.2 REGISTRY/cloud-release/elastic-agent-cloud:8.18.8
+    docker tag docker.elastic.co/cloud-release/enterprise-search-cloud:8.18.2 REGISTRY/cloud-release/enterprise-search-cloud:8.18.8
+    docker tag docker.elastic.co/cloud-release/elasticsearch-cloud-ess:9.0.1 REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.8
+    docker tag docker.elastic.co/cloud-release/kibana-cloud:9.0.1 REGISTRY/cloud-release/kibana-cloud:9.0.8
+    docker tag docker.elastic.co/cloud-release/elastic-agent-cloud:9.0.1 REGISTRY/cloud-release/elastic-agent-cloud:9.0.8
     ```
 
 4. Push the Docker images to your private Docker registry, using the same tags from the previous step. Replace `REGISTRY` with your actual registry URL, for example `my.private.repo:5000`:
 
     ```sh subs=true
     docker push REGISTRY/cloud-enterprise/elastic-cloud-enterprise:{{version.ece}}
-    docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.2
-    docker push REGISTRY/cloud-release/kibana-cloud:8.18.2
-    docker push REGISTRY/cloud-release/elastic-agent-cloud:8.18.2
-    docker push REGISTRY/cloud-release/enterprise-search-cloud:8.18.2
-    docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.1
-    docker push REGISTRY/cloud-release/kibana-cloud:9.0.1
-    docker push REGISTRY/cloud-release/elastic-agent-cloud:9.0.1
+    docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:8.18.8
+    docker push REGISTRY/cloud-release/kibana-cloud:8.18.8
+    docker push REGISTRY/cloud-release/elastic-agent-cloud:8.18.8
+    docker push REGISTRY/cloud-release/enterprise-search-cloud:8.18.8
+    docker push REGISTRY/cloud-release/elasticsearch-cloud-ess:9.0.8
+    docker push REGISTRY/cloud-release/kibana-cloud:9.0.8
+    docker push REGISTRY/cloud-release/elastic-agent-cloud:9.0.8
     ```
 
 5. On an internet-connected host, download the installation script: