diff --git a/bitnami/nats/2/debian-12/Dockerfile b/bitnami/nats/2/debian-12/Dockerfile
index 9a5b9f75c69a..740978b2819b 100644
--- a/bitnami/nats/2/debian-12/Dockerfile
+++ b/bitnami/nats/2/debian-12/Dockerfile
@@ -17,7 +17,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "nats-2.12.5-0-linux-${OS_ARCH}-debian-12" \
+      "nats-2.12.6-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -40,18 +40,18 @@ ARG TARGETARCH
 ENV OS_ARCH="${TARGETARCH:-amd64}"
 
 LABEL org.opencontainers.image.base.name="scratch" \
-      org.opencontainers.image.created="2026-03-09T16:44:12Z" \
+      org.opencontainers.image.created="2026-03-24T16:44:24Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.title="nats" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="2.12.5"
+      org.opencontainers.image.version="2.12.6"
 
 COPY rootfs /
 COPY --from=builder /opt/bitnami/nats/.spdx-nats.spdx /opt/bitnami/nats/.spdx-nats.spdx
 COPY --from=builder /opt/bitnami/nats/bin/nats-server /opt/bitnami/nats/bin/nats-server
 COPY --from=builder /opt/bitnami/nats/licenses /opt/bitnami/nats/licenses
 
-ENV APP_VERSION="2.12.5" \
+ENV APP_VERSION="2.12.6" \
     BITNAMI_APP_NAME="nats" \
     IMAGE_REVISION="0" \
     PATH="/opt/bitnami/nats/bin:$PATH"
diff --git a/bitnami/nats/README.md b/bitnami/nats/README.md
index 090b290f6040..75dc63d0feac 100644
--- a/bitnami/nats/README.md
+++ b/bitnami/nats/README.md
@@ -180,6 +180,13 @@ The following subsections describe notable changes.
 
 - The configuration logic is now based on Bash scripts in the *rootfs/* folder.
 
+### FIPS configuration in Bitnami Secure Images
+
+The Bitnami NATS Docker image from the [Bitnami Secure Images](https://go-vmware.broadcom.com/contact-us) catalog includes extra features and settings to configure the container with FIPS capabilities. You can configure the next environment variables:
+
+- `OPENSSL_FIPS`: whether OpenSSL runs in FIPS mode or not. `yes` (default), `no`.
+- `GODEBUG`: controls Go FIPS mode. Use `fips140=only` (restricted), `fips140=on` (relaxed), or `fips140=off` (disabled).
+
 ## License
 
 Copyright © 2026 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.