add cve id
diff --git a/release-notes/VERSION b/release-notes/VERSION
index aedf908..66b82bc 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -18,7 +18,7 @@
 #2498: Block one more gadget type (log4j-extras/1.2, CVE-2019-17531)
 #2526: Block two more gadget types (ehcache/JNDI, CVE-2019-20330)
   (reported by UltramanGaia)
-#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-xxxxx)
+#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-8840)
   (reported by threedr3am)
 
 2.8.11.4 (25-Jul-2019)