diff --git a/CHANGELOG.md b/CHANGELOG.md
index eac18a9fe..8bee0beb6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,11 @@
+# Continuwuity 26.7.3 (2026-08-11)
+
+## Bugfixes
+
+- Fixed a vulnerability that enabled the server to leak certain events over federation. Contributed by @eleboucher. (SEC26)
+- Fixed an issue that allowed an attacker to take over another account on the same server under certain conditions. ([GHSA-v2x6-m99h-vqxx](https://github.com/continuwuity/continuwuity/security/advisories/GHSA-v2x6-m99h-vqxx)) Contributed by @gingershaped and reported by GlitchedAxiom. (SEC28)
+
+
 # Continuwuity 26.7.0 (2026-07-27)
 
 ## Features
diff --git a/changelog.d/SEC26.bugfix.md b/changelog.d/SEC26.bugfix.md
deleted file mode 100644
index 5bde5ccdc..000000000
--- a/changelog.d/SEC26.bugfix.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed a vulnerability that enabled the server to leak certain events over federation. Contributed by @eleboucher.
diff --git a/changelog.d/SEC28.bugfix.md b/changelog.d/SEC28.bugfix.md
deleted file mode 100644
index 71a68f2a2..000000000
--- a/changelog.d/SEC28.bugfix.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed an issue that allowed an attacker to take over another account on the same server under certain conditions. ([GHSA-v2x6-m99h-vqxx](https://github.com/continuwuity/continuwuity/security/advisories/GHSA-v2x6-m99h-vqxx)) Contributed by @gingershaped and reported by GlitchedAxiom.
diff --git a/changelog.d/sec10.bugfix.md b/changelog.d/sec10.bugfix.md
deleted file mode 100644
index a14ef4128..000000000
--- a/changelog.d/sec10.bugfix.md
+++ /dev/null
@@ -1 +0,0 @@
-**TODO - embargoed until next release** (maintainers see security issue 10 when writing rls notes). Contributed by @eleboucher.