diff --git a/changelog/unreleased/improve-cors.md b/changelog/unreleased/improve-cors.md
new file mode 100644
index 0000000000..c659f13585
--- /dev/null
+++ b/changelog/unreleased/improve-cors.md
@@ -0,0 +1,7 @@
+Enhancement: Change Cors default settings
+
+We have changed the default CORS settings to set `Access-Control-Allow-Origin` to the `OCIS_URL` if not explicitely set
+and `Access-Control-Allow-Credentials` to `false` if not explicitely set.
+
+https://github.com/owncloud/ocis/pull/8518
+https://github.com/owncloud/ocis/issues/8514