diff --git a/Lib/ensurepip/__init__.py b/Lib/ensurepip/__init__.py
index 86e06595ee05946..a9ff8eb164f466d 100644
--- a/Lib/ensurepip/__init__.py
+++ b/Lib/ensurepip/__init__.py
@@ -10,7 +10,7 @@
 
 
 __all__ = ["version", "bootstrap"]
-_PIP_VERSION = "26.2.1"
+_PIP_VERSION = "26.2.2"
 
 # Directory of system wheel packages. Some Linux distribution packaging
 # policies recommend against bundling dependencies. For example, Fedora
diff --git a/Lib/ensurepip/_bundled/pip-26.2.1-py3-none-any.whl b/Lib/ensurepip/_bundled/pip-26.2.2-py3-none-any.whl
similarity index 88%
rename from Lib/ensurepip/_bundled/pip-26.2.1-py3-none-any.whl
rename to Lib/ensurepip/_bundled/pip-26.2.2-py3-none-any.whl
index bc442f6b99306b3..d884a0ad81170c1 100644
Binary files a/Lib/ensurepip/_bundled/pip-26.2.1-py3-none-any.whl and b/Lib/ensurepip/_bundled/pip-26.2.2-py3-none-any.whl differ
diff --git a/Misc/NEWS.d/next/Security/2026-10-20-13-15-00.gh-issue-159894.8Kp4mN.rst b/Misc/NEWS.d/next/Security/2026-10-20-13-15-00.gh-issue-159894.8Kp4mN.rst
new file mode 100644
index 000000000000000..0f27a475b5883eb
--- /dev/null
+++ b/Misc/NEWS.d/next/Security/2026-10-20-13-15-00.gh-issue-159894.8Kp4mN.rst
@@ -0,0 +1 @@
+Bump the version of :pypi:`pip` bundled in :mod:`ensurepip` to version 26.2.2.