diff --git a/docs/zz_generated.kubermaticConfiguration.ce.yaml b/docs/zz_generated.kubermaticConfiguration.ce.yaml
index a12db5528a0..2d855f53b5b 100644
--- a/docs/zz_generated.kubermaticConfiguration.ce.yaml
+++ b/docs/zz_generated.kubermaticConfiguration.ce.yaml
@@ -453,7 +453,7 @@ spec:
   # Versions configures the available and default Kubernetes versions and updates.
   versions:
     # Default is the default version to offer users.
-    default: v1.28.7
+    default: v1.28.9
     # ExternalClusters contains the available and default Kubernetes versions and updates for ExternalClusters.
     externalClusters:
       aks:
@@ -546,13 +546,16 @@ spec:
       - v1.27.6
       - v1.27.10
       - v1.27.11
+      - v1.27.13
       - v1.28.2
       - v1.28.5
       - v1.28.6
       - v1.28.7
+      - v1.28.9
       - v1.29.0
       - v1.29.1
       - v1.29.2
+      - v1.29.4
   # VerticalPodAutoscaler configures the Kubernetes VPA integration.
   verticalPodAutoscaler:
     admissionController:
diff --git a/docs/zz_generated.kubermaticConfiguration.ee.yaml b/docs/zz_generated.kubermaticConfiguration.ee.yaml
index eaf679f9f22..391c02c4f71 100644
--- a/docs/zz_generated.kubermaticConfiguration.ee.yaml
+++ b/docs/zz_generated.kubermaticConfiguration.ee.yaml
@@ -453,7 +453,7 @@ spec:
   # Versions configures the available and default Kubernetes versions and updates.
   versions:
     # Default is the default version to offer users.
-    default: v1.28.7
+    default: v1.28.9
     # ExternalClusters contains the available and default Kubernetes versions and updates for ExternalClusters.
     externalClusters:
       aks:
@@ -546,13 +546,16 @@ spec:
       - v1.27.6
       - v1.27.10
       - v1.27.11
+      - v1.27.13
       - v1.28.2
       - v1.28.5
       - v1.28.6
       - v1.28.7
+      - v1.28.9
       - v1.29.0
       - v1.29.1
       - v1.29.2
+      - v1.29.4
   # VerticalPodAutoscaler configures the Kubernetes VPA integration.
   verticalPodAutoscaler:
     admissionController:
diff --git a/pkg/defaulting/configuration.go b/pkg/defaulting/configuration.go
index da6f46fb78f..7b35ed02ea0 100644
--- a/pkg/defaulting/configuration.go
+++ b/pkg/defaulting/configuration.go
@@ -216,7 +216,7 @@ var (
 	}
 
 	DefaultKubernetesVersioning = kubermaticv1.KubermaticVersioningConfiguration{
-		Default: semver.NewSemverOrDie("v1.28.7"),
+		Default: semver.NewSemverOrDie("v1.28.9"),
 		// NB: We keep all patch releases that we supported, even if there's
 		// an auto-upgrade rule in place. That's because removing a patch
 		// release from this slice can break reconciliation loop for clusters
@@ -230,15 +230,18 @@ var (
 			newSemver("v1.27.6"),
 			newSemver("v1.27.10"),
 			newSemver("v1.27.11"),
+			newSemver("v1.27.13"),
 			// Kubernetes 1.28
 			newSemver("v1.28.2"),
 			newSemver("v1.28.5"),
 			newSemver("v1.28.6"),
 			newSemver("v1.28.7"),
+			newSemver("v1.28.9"),
 			// Kubernetes 1.29
 			newSemver("v1.29.0"),
 			newSemver("v1.29.1"),
 			newSemver("v1.29.2"),
+			newSemver("v1.29.4"),
 		},
 		Updates: []kubermaticv1.Update{
 			// ======= 1.27 =======