diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7a2f1964..df6208a8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,10 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Changed
+
+- Bump keycloak to 26.7.1
+
 ## [0.9.0] - 2026-07-22
 
 ### Added
diff --git a/compose.yaml b/compose.yaml
index 394b4ab1..43d4629f 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -112,7 +112,7 @@ services:
       - objectstorage-data:/data
 
   keycloak:
-    image: quay.io/keycloak/keycloak:26.6.4@sha256:0aae0de7fca85525f727d3354df17896092de8bb26ae4c12d89c77e5df8cbce4
+    image: quay.io/keycloak/keycloak:26.7.1@sha256:f1f1f01e472c8a78df40d8f2a49a925274eda4d3d80d5f6edbb5c880ee3c01c6
     volumes:
       - ./src/keycloak/realm.json:/opt/keycloak/data/import/realm.json:ro
       - ./src/keycloak/themes/dsfr-2.3.4.jar:/opt/keycloak/providers/keycloak-theme.jar:ro
diff --git a/src/keycloak/Dockerfile b/src/keycloak/Dockerfile
index 004c716a..8794a25c 100644
--- a/src/keycloak/Dockerfile
+++ b/src/keycloak/Dockerfile
@@ -14,7 +14,7 @@ fi
 zip -r /custom-scripts.jar META-INF *.js
 EOR
 
-FROM quay.io/keycloak/keycloak:26.6.4@sha256:0aae0de7fca85525f727d3354df17896092de8bb26ae4c12d89c77e5df8cbce4 AS builder
+FROM quay.io/keycloak/keycloak:26.7.1@sha256:f1f1f01e472c8a78df40d8f2a49a925274eda4d3d80d5f6edbb5c880ee3c01c6 AS builder
 
 WORKDIR /opt/keycloak
 COPY --chown=keycloak:keycloak --chmod=644 themes/dsfr-2.3.4.jar /opt/keycloak/providers/dsfr.jar
@@ -32,7 +32,7 @@ ARG KC_DB=postgres
 
 RUN /opt/keycloak/bin/kc.sh build
 
-FROM quay.io/keycloak/keycloak:26.6.4@sha256:0aae0de7fca85525f727d3354df17896092de8bb26ae4c12d89c77e5df8cbce4
+FROM quay.io/keycloak/keycloak:26.7.1@sha256:f1f1f01e472c8a78df40d8f2a49a925274eda4d3d80d5f6edbb5c880ee3c01c6
 
 COPY --from=builder /opt/keycloak/ /opt/keycloak/
 ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]
diff --git a/src/keycloak/buildpack/scalingo_postcompile.sh b/src/keycloak/buildpack/scalingo_postcompile.sh
index bdb42111..078e1fe8 100755
--- a/src/keycloak/buildpack/scalingo_postcompile.sh
+++ b/src/keycloak/buildpack/scalingo_postcompile.sh
@@ -2,7 +2,7 @@
 
 set -e
 
-KEYCLOAK_VERSION="26.6.4"
+KEYCLOAK_VERSION="26.7.1"
 KEYCLOAK_DIST="https://github.com/keycloak/keycloak/releases/download/${KEYCLOAK_VERSION}/keycloak-${KEYCLOAK_VERSION}.tar.gz"
 
 echo "-----> Downloading Keycloak $KEYCLOAK_VERSION"
diff --git a/src/keycloak/bulk-role-membership/bulk-role-membership.jar b/src/keycloak/bulk-role-membership/bulk-role-membership.jar
index 00430ea4..02c3aef8 100644
Binary files a/src/keycloak/bulk-role-membership/bulk-role-membership.jar and b/src/keycloak/bulk-role-membership/bulk-role-membership.jar differ
diff --git a/src/keycloak/bulk-role-membership/pom.xml b/src/keycloak/bulk-role-membership/pom.xml
index a7f0f969..819d7b6b 100644
--- a/src/keycloak/bulk-role-membership/pom.xml
+++ b/src/keycloak/bulk-role-membership/pom.xml
@@ -21,7 +21,7 @@
         <maven.compiler.source>21</maven.compiler.source>
         <maven.compiler.target>21</maven.compiler.target>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <keycloak.version>26.6.4</keycloak.version>
+        <keycloak.version>26.7.1</keycloak.version>
     </properties>
 
     <dependencies>