diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 9e5fd0e5f08..3d4e5f57bd4 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.7--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.8--1' }}
   'BUILD_DIR': |-
     build
   'CLIENT_DIR': |-
diff --git a/.github/workflows/private.yaml b/.github/workflows/private.yaml
index a59ed36cdc4..f96d7b852c1 100644
--- a/.github/workflows/private.yaml
+++ b/.github/workflows/private.yaml
@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.7--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.8--1' }}
   'CACHE_BUSTER': |-
     ${{ inputs.cache_buster || '0' }}
   'CLIENT_DIR': |-
diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index a6247283dbb..bbaf77104d7 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -1,6 +1,6 @@
 'env':
   'CLIENT_DIR': 'client'
-  'GO_VERSION': '1.26.7'
+  'GO_VERSION': '1.26.8'
   'NODE_VERSION': '24'
 'jobs':
   'ESLint':
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4be84b2f286..35ef2976fb6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,15 +18,15 @@ See also the [v0.107.80 GitHub milestone][ms-v0.107.80].
 NOTE: Add new changes BELOW THIS COMMENT.
 -->
 
-<!--
-NOTE: Add new changes ABOVE THIS COMMENT.
--->
-
 ### Security
 
-- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.7][go-1.26.7].
+- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.8][go-1.26.8].
 
-[go-1.26.7]: https://groups.google.com/g/golang-announce/c/qA6Vpj2UA-4
+[go-1.26.8]: https://groups.google.com/g/golang-announce/c/QiTRm-HGGtI
+
+<!--
+NOTE: Add new changes ABOVE THIS COMMENT.
+-->
 
 ## [v0.107.79] - 2026-08-18
 
diff --git a/Makefile b/Makefile
index 7a61af52b1d..d845d2b3992 100644
--- a/Makefile
+++ b/Makefile
@@ -25,7 +25,7 @@ DIST_DIR = dist
 GOAMD64 = v1
 GOPROXY = https://proxy.golang.org|direct
 GOTELEMETRY = off
-GOTOOLCHAIN = go1.26.7
+GOTOOLCHAIN = go1.26.8
 GPG_KEY = devteam@adguard.com
 GPG_KEY_PASSPHRASE = not-a-real-password
 NPM = npm
diff --git a/bamboo-specs/release.yaml b/bamboo-specs/release.yaml
index cb595a26e9f..953f405d56d 100644
--- a/bamboo-specs/release.yaml
+++ b/bamboo-specs/release.yaml
@@ -12,7 +12,7 @@
     'channel': 'edge'
     'clientDir': 'client_v2'
     'dockerFrontend': 'adguard/home-js-builder:4.0'
-    'dockerGo': 'adguard/go-builder:1.26.7--1'
+    'dockerGo': 'adguard/go-builder:1.26.8--1'
 
 'stages':
   - 'Build frontend':
@@ -297,7 +297,7 @@
             'channel': 'beta'
             'clientDir': 'client'
             'dockerFrontend': 'adguard/home-js-builder:4.0'
-            'dockerGo': 'adguard/go-builder:1.26.7--1'
+            'dockerGo': 'adguard/go-builder:1.26.8--1'
     # release-vX.Y.Z branches are the branches from which the actual final
     # release is built.
   - '^release-v[0-9]+\.[0-9]+\.[0-9]+':
@@ -314,4 +314,4 @@
             'channel': 'release'
             'clientDir': 'client'
             'dockerFrontend': 'adguard/home-js-builder:4.0'
-            'dockerGo': 'adguard/go-builder:1.26.7--1'
+            'dockerGo': 'adguard/go-builder:1.26.8--1'
diff --git a/docker/ci.Dockerfile b/docker/ci.Dockerfile
index 93c2fe23da5..1999dc72e20 100644
--- a/docker/ci.Dockerfile
+++ b/docker/ci.Dockerfile
@@ -28,7 +28,7 @@
 #    needed.  Keep it in sync with bamboo-specs/bamboo.yaml.
 
 # NOTE:  Keep in sync with bamboo-specs/bamboo.yaml.
-ARG BASE_IMAGE=adguard/go-builder:1.26.7--1
+ARG BASE_IMAGE=adguard/go-builder:1.26.8--1
 
 # The dependencies stage is needed to install packages and tool dependencies.
 # This is also where binaries like osslsigncode, which may be required for tests
diff --git a/go.mod b/go.mod
index 66ee0507162..cb7e674c868 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/AdguardTeam/AdGuardHome
 
-go 1.26.7
+go 1.26.8
 
 require (
 	github.com/AdguardTeam/dnscrypt v0.0.2
diff --git a/go.sum b/go.sum
index e5f86bf28c5..a66f06c8e9b 100644
--- a/go.sum
+++ b/go.sum
@@ -6,8 +6,6 @@ cloud.google.com/go/compute/metadata v0.9.0 h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdB
 cloud.google.com/go/compute/metadata v0.9.0/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10=
 github.com/AdguardTeam/dnscrypt v0.0.2 h1:kIFCyjYofKHug7RwPGOjVga81P0/zOQdbUN+7p+I95M=
 github.com/AdguardTeam/dnscrypt v0.0.2/go.mod h1:qCFs51rLfNzEDZqb6nz1tocVLnEearJ1zng6O3I6ecA=
-github.com/AdguardTeam/dnsproxy v0.84.0 h1:bcTORgQL0L5cwcTz9f+iB0JPZVbCHlCv7phso9y3lrU=
-github.com/AdguardTeam/dnsproxy v0.84.0/go.mod h1:nZlktYebWcLO613q1j2N0bZ5BEnHPuqXAyW6O9vIhDU=
 github.com/AdguardTeam/dnsproxy v0.84.1 h1:Ge1UdyVNswKn0BKrV5qp+o/V0tF0N6wYcxaGYujDeEg=
 github.com/AdguardTeam/dnsproxy v0.84.1/go.mod h1:nZlktYebWcLO613q1j2N0bZ5BEnHPuqXAyW6O9vIhDU=
 github.com/AdguardTeam/golibs v0.35.15 h1:KjksvvzlQqxdNvrz+O3FgMbZKZAQdcoCkgBz0mR7wFQ=