diff --git a/third_party/contour-latest/net-contour.yaml b/third_party/contour-latest/net-contour.yaml
index 38cc58eacdae..c4fa056f6990 100644
--- a/third_party/contour-latest/net-contour.yaml
+++ b/third_party/contour-latest/net-contour.yaml
@@ -8,7 +8,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260506-4eb3dbef"
+    app.kubernetes.io/version: "20260521-c3b40f92"
     serving.knative.dev/controller: "true"
 rules:
   - apiGroups: ["projectcontour.io"]
@@ -38,7 +38,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260506-4eb3dbef"
+    app.kubernetes.io/version: "20260521-c3b40f92"
 data:
   _example: |
     ################################
@@ -111,7 +111,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260506-4eb3dbef"
+    app.kubernetes.io/version: "20260521-c3b40f92"
 spec:
   replicas: 1
   selector:
@@ -123,14 +123,14 @@ spec:
         app: net-contour-controller
         app.kubernetes.io/component: net-contour
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20260506-4eb3dbef"
+        app.kubernetes.io/version: "20260521-c3b40f92"
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:bfc260605216ee3eecc14fd55ad6de0324668d6d91bab58b0580eb62013932a4
+          image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:39d3b91a669b7154ef77f086f8e397eee3867ea7b94f1d47b5b179ddb70928f0
           resources:
             requests:
               cpu: 40m
@@ -174,7 +174,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260506-4eb3dbef"
+    app.kubernetes.io/version: "20260521-c3b40f92"
 spec:
   delegations:
     - secretName: routing-serving-certs