diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0609dbefb..6379ca44d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -581,9 +581,12 @@ Add `linux_netdev` check command. #9045
 
 ## 2.13.14 (2026-01-29)
 
-This release updates the bundled OpenSSL library and includes changes to allow
-building with newer toolchains.
+This security release fixes a problem in the Icinga 2 Windows MSI that did not
+set proper permissions for `%ProgramData%\icinga2\var`. Additionally, it
+updates the bundled OpenSSL library and includes changes to allow building with
+newer toolchains.
 
+* CVE-2026-24413: Fix permissions of `%ProgramData%\icinga2\var` on Windows.
 * Windows: Update to OpenSSL 3.0.19. #10704
 * Allow building with CMake 4. #10625