diff --git a/ChangeLog b/ChangeLog
index 63f5125083..562d71852a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -42,7 +42,6 @@ Security
      servers with MBEDTLS_SSL_EARLY_DATA enabled, this could be exploited by a
      man-in-the-middle attacker to cause loss of 0-RTT early data.
      Reported by Ben Smyth.
-     CVE-2026-TODO.
    * Fix a possible buffer overflow in mbedtls_ecdh_calc_secret(): when the
      provided output buffer is too small, sometimes (depending on the value of
      the computed shared secret), the function would not return an error as it