Brotli security flaw: Synctech hosting servers are patched

All Synctech hosting servers now have the fix for the Brotli flaw (CVE-2026-111497). Your websites, email and backups kept running while we did the work. Customers with hosting on our servers do not need to take any action.

What happened

Brotli is a common way to compress data on the web. A flaw in it was reported in late October, and on 27 October the US cybersecurity agency CISA said attackers are now using it. Many programs use Brotli, so we checked every service on our servers.

What we did

The fixed version was installed on 28 October. Some programs keep using the old copy until they restart, so on the night of 28 October we restarted those services one at a time and checked websites, email and backups after each step.

What to do

Nothing for your hosting. For your own computers and servers, follow our earlier advisory: https://apps.synctech.com.my/announcements/brotli-flaw-cve-2026-111497-is-being-exploited-what-to-update

Questions? Email support@synctech.com.my or visit our support help centre.