diff --git a/build/ubi/Dockerfile b/build/ubi/Dockerfile
index 58edad536b..e2b12e8093 100644
--- a/build/ubi/Dockerfile
+++ b/build/ubi/Dockerfile
@@ -11,7 +11,7 @@ RUN make build
 
 FROM golang:1.25 AS ca-certs-provider
 
-FROM redhat/ubi9-minimal:9.6 AS ngf-ubi-minimal
+FROM redhat/ubi9-minimal:9.6-1760515502 AS ngf-ubi-minimal
 # CA certs are needed for telemetry report so that NGF can verify the server's certificate.
 COPY --from=ca-certs-provider --link /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 USER 101:1001
diff --git a/build/ubi/Dockerfile.nginx b/build/ubi/Dockerfile.nginx
index b441590511..7b621e9391 100644
--- a/build/ubi/Dockerfile.nginx
+++ b/build/ubi/Dockerfile.nginx
@@ -8,7 +8,7 @@ ADD --link --chown=101:1001 build/ubi/repos/agent.repo agent.repo
 
 FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi9@sha256:46e38dc6d8a9151f28f6dd775c528425ca4dfbc2a39055da08f653c12f959d27 AS ubi9-packages
 
-FROM redhat/ubi9-minimal:9.6 AS ubi-nginx
+FROM redhat/ubi9-minimal:9.6-1760515502 AS ubi-nginx
 
 # renovate: datasource=github-tags depName=nginx/agent
 ARG NGINX_AGENT_VERSION=v3.3.2
diff --git a/build/ubi/Dockerfile.nginxplus b/build/ubi/Dockerfile.nginxplus
index c392ddd76c..7b1c4670b2 100644
--- a/build/ubi/Dockerfile.nginxplus
+++ b/build/ubi/Dockerfile.nginxplus
@@ -8,7 +8,7 @@ ADD --link --chown=101:1001 build/ubi/repos/agent.repo agent.repo
 
 FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi9@sha256:46e38dc6d8a9151f28f6dd775c528425ca4dfbc2a39055da08f653c12f959d27 AS ubi9-packages
 
-FROM redhat/ubi9-minimal:9.6 AS ubi-nginx-plus
+FROM redhat/ubi9-minimal:9.6-1760515502 AS ubi-nginx-plus
 
 ARG NGINX_PLUS_VERSION=R35