diff --git a/HISTORY.md b/HISTORY.md
index 3828073adf..5a7626a22d 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -6,6 +6,13 @@ dev
 
 - \[Short description of non-trivial change.\]
 
+2.32.6 (2025-12-08)
+-------------------
+
+**Security**
+- CVE-2025-66418 Updated urllib3 dependency to >=2.6.0 to address security vulnerabilities
+  fixed in the December 5th, 2025 urllib3 release.
+
 2.32.5 (2025-08-18)
 -------------------
 
diff --git a/setup.cfg b/setup.cfg
index 8d44e0e14b..32f8eb3427 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -7,7 +7,7 @@ requires-dist =
     certifi>=2017.4.17
     charset_normalizer>=2,<4
     idna>=2.5,<4
-    urllib3>=1.21.1,<3
+    urllib3>=2.6.0,<3
 
 [flake8]
 ignore = E203, E501, W503
diff --git a/setup.py b/setup.py
index ff65d39102..f5c73af5bc 100755
--- a/setup.py
+++ b/setup.py
@@ -36,7 +36,7 @@
 requires = [
     "charset_normalizer>=2,<4",
     "idna>=2.5,<4",
-    "urllib3>=1.21.1,<3",
+    "urllib3>=2.6.0,<3",
     "certifi>=2017.4.17",
 ]
 test_requirements = [
diff --git a/src/requests/__version__.py b/src/requests/__version__.py
index effdd98cf1..421a93a3b5 100644
--- a/src/requests/__version__.py
+++ b/src/requests/__version__.py
@@ -5,8 +5,8 @@
 __title__ = "requests"
 __description__ = "Python HTTP for Humans."
 __url__ = "https://requests.readthedocs.io"
-__version__ = "2.32.5"
-__build__ = 0x023205
+__version__ = "2.32.6"
+__build__ = 0x023206
 __author__ = "Kenneth Reitz"
 __author_email__ = "me@kennethreitz.org"
 __license__ = "Apache-2.0"