diff --git a/bitnami/keycloak/26/debian-12/Dockerfile b/bitnami/keycloak/26/debian-12/Dockerfile
index 383b0728ca92..66d7d575c275 100644
--- a/bitnami/keycloak/26/debian-12/Dockerfile
+++ b/bitnami/keycloak/26/debian-12/Dockerfile
@@ -8,13 +8,13 @@ ARG JAVA_EXTRA_SECURITY_DIR="/bitnami/java/extra-security"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-07-06T20:57:02Z" \
+      org.opencontainers.image.created="2026-07-09T08:26:53Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/keycloak/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/keycloak" \
       org.opencontainers.image.title="keycloak" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="26.6.4"
+      org.opencontainers.image.version="26.7.0"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -29,9 +29,9 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "wait-for-port-1.0.10-13-linux-${OS_ARCH}-debian-12" \
+      "wait-for-port-1.0.10-14-linux-${OS_ARCH}-debian-12" \
       "jre-21.0.11-11-1-linux-${OS_ARCH}-debian-12" \
-      "keycloak-26.6.4-3-linux-${OS_ARCH}-debian-12" \
+      "keycloak-26.7.0-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -50,9 +50,9 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 COPY rootfs /
 RUN /opt/bitnami/scripts/java/postunpack.sh
 RUN /opt/bitnami/scripts/keycloak/postunpack.sh
-ENV APP_VERSION="26.6.4" \
+ENV APP_VERSION="26.7.0" \
     BITNAMI_APP_NAME="keycloak" \
-    IMAGE_REVISION="3" \
+    IMAGE_REVISION="0" \
     JAVA_HOME="/opt/bitnami/java" \
     PATH="/opt/bitnami/common/bin:/opt/bitnami/java/bin:/opt/bitnami/keycloak/bin:$PATH"
 
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.6.4-3-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.6.4-3-linux-amd64-debian-12.tar.gz.sha256
deleted file mode 100644
index 1f0c1460946c..000000000000
--- a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.6.4-3-linux-amd64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-df1901d2dcfebdfe4093b290913b34a0f52e7c14e36afac05d6bdaa016ce6d49  keycloak-26.6.4-3-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.6.4-3-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.6.4-3-linux-arm64-debian-12.tar.gz.sha256
deleted file mode 100644
index dd627090d4f4..000000000000
--- a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.6.4-3-linux-arm64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-2b9bf9fa8ace8d9d0c3618f20ab4646a317d0008b5862b11256404a5c63b1d1a  keycloak-26.6.4-3-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.7.0-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.7.0-0-linux-amd64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..258f88756482
--- /dev/null
+++ b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.7.0-0-linux-amd64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+2d010115afa76748e6c5dfe5badba8f604e649e3bebe5c21d6ca10d2b102dc77  keycloak-26.7.0-0-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.7.0-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.7.0-0-linux-arm64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..a14f8e4c52c2
--- /dev/null
+++ b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/keycloak-26.7.0-0-linux-arm64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+d26c5dba3b1b6a6e58cfae873fc27ca60357f34d2258d9fe1dbcaf498696419b  keycloak-26.7.0-0-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-13-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-13-linux-amd64-debian-12.tar.gz.sha256
deleted file mode 100644
index 508533b8af2b..000000000000
--- a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-13-linux-amd64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-a6e453ebb01a25354771584cac544f1c7142ffcf81b9d88fb0ab5d5e9d23ba54  wait-for-port-1.0.10-13-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-13-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-13-linux-arm64-debian-12.tar.gz.sha256
deleted file mode 100644
index a4929821d088..000000000000
--- a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-13-linux-arm64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-e10e80f03ddd46d5fa479f3ca6cf24e6317540202cb244769167a91b3afbc9fc  wait-for-port-1.0.10-13-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-14-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-14-linux-amd64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..a85effe773e4
--- /dev/null
+++ b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-14-linux-amd64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+4ea516dd6f57b3b33883e810ddb8b4dafa310948100434fd5a6272364d44329f  wait-for-port-1.0.10-14-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-14-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-14-linux-arm64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..8373c7e8a532
--- /dev/null
+++ b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/checksums/wait-for-port-1.0.10-14-linux-arm64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+63a1be9dccbce0765fdaa60e122d8a683a72f28bcc418e3a4b4121174f3ecf4d  wait-for-port-1.0.10-14-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/scripts/libservice.sh b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/scripts/libservice.sh
index a8293800d55c..c1d60a5c5f42 100644
--- a/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/scripts/libservice.sh
+++ b/bitnami/keycloak/26/debian-12/prebuildfs/opt/bitnami/scripts/libservice.sh
@@ -424,3 +424,23 @@ EOF
 WantedBy=bitnami.service
 EOF
 }
+
+########################
+# Register a SIGTERM handler that forwards the signal to all child processes.
+# Should be called at the start of run.sh, before launching any background processes.
+# Globals:
+#   None
+# Arguments:
+#   None
+# Returns:
+#   None
+#########################
+service_register_term_forwarder() {
+    _service_forward_term() {
+        warn "Caught signal SIGTERM, passing it to child processes..."
+        pgrep -P $$ | xargs kill -TERM 2>/dev/null
+        wait
+        exit $?
+    }
+    trap _service_forward_term TERM
+}