diff --git a/build/ubi/Dockerfile b/build/ubi/Dockerfile
index 81cc76e417..327db85316 100644
--- a/build/ubi/Dockerfile
+++ b/build/ubi/Dockerfile
@@ -11,7 +11,7 @@ RUN make build
 
 FROM golang:1.25 AS ca-certs-provider
 
-FROM redhat/ubi9-minimal:9.6 AS ngf-ubi-minimal
+FROM redhat/ubi9-minimal:9.6-1758184547 AS ngf-ubi-minimal
 # CA certs are needed for telemetry report so that NGF can verify the server's certificate.
 COPY --from=ca-certs-provider --link /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 USER 101:1001
diff --git a/build/ubi/Dockerfile.nginx b/build/ubi/Dockerfile.nginx
index 4de10ed7c4..b1e357daea 100644
--- a/build/ubi/Dockerfile.nginx
+++ b/build/ubi/Dockerfile.nginx
@@ -8,7 +8,7 @@ ADD --link --chown=101:1001 build/ubi/repos/agent.repo agent.repo
 
 FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi9@sha256:073c40696d255cbc11aff52473f975e99c8253e0982da7f42d9f70b567b31eb2 AS ubi9-packages
 
-FROM redhat/ubi9-minimal:9.6 AS ubi-nginx
+FROM redhat/ubi9-minimal:9.6-1758184547 AS ubi-nginx
 
 # renovate: datasource=github-tags depName=nginx/agent
 ARG NGINX_AGENT_VERSION=v3.3.2
diff --git a/build/ubi/Dockerfile.nginxplus b/build/ubi/Dockerfile.nginxplus
index d9b63bd34d..3671e6a1fb 100644
--- a/build/ubi/Dockerfile.nginxplus
+++ b/build/ubi/Dockerfile.nginxplus
@@ -8,7 +8,7 @@ ADD --link --chown=101:1001 build/ubi/repos/agent.repo agent.repo
 
 FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi9@sha256:073c40696d255cbc11aff52473f975e99c8253e0982da7f42d9f70b567b31eb2 AS ubi9-packages
 
-FROM redhat/ubi9-minimal:9.6 AS ubi-nginx-plus
+FROM redhat/ubi9-minimal:9.6-1758184547 AS ubi-nginx-plus
 
 ARG NGINX_PLUS_VERSION=R35