diff --git a/compose.yml b/compose.yml
index 8b4bb4c..81b9537 100644
--- a/compose.yml
+++ b/compose.yml
@@ -48,7 +48,7 @@ services:
         - "caddy=${DOMAIN}"
         - "caddy.reverse_proxy={{upstreams 8080}}"
         - "caddy.tls.on_demand="
-        - "coop-cloud.${STACK_NAME}.version=10.9.1+26.7.1"
+        - "coop-cloud.${STACK_NAME}.version=10.9.2+26.7.2"
 
   db:
     image: "mariadb:12.3"
diff --git a/release/10.9.2+26.7.2 b/release/10.9.2+26.7.2
new file mode 100644
index 0000000..11bb142
--- /dev/null
+++ b/release/10.9.2+26.7.2
@@ -0,0 +1 @@
+Contains security fix for critical vuln CVE-2026-18963 - https://nvd.nist.gov/vuln/detail/CVE-2026-18963
\ No newline at end of file