diff --git a/CHANGELOG b/CHANGELOG
index c1a098f8f..298f2f0f1 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,6 +5,7 @@ CHANGELOG Roundcube Webmail
 - Fix bug where HTML messages could have been rendered empty on some systems (#5957)
 - Fix (again) bug where image data URIs in css style were treated as evil/remote in mail preview (#5580)
 - Managesieve: Fix parsing dot-staffed lines in multiline text (#5838, #5959)
+- Fix file disclosure vulnerability caused by insuficient input validation in relation to attachment plugins (#6026)
 
 RELEASE 1.2.6
 -------------