Skip to content
Get started

Firmware

Wall panel vendors publish almost nothing about their firmware. Download URLs are unlisted, change without notice and disappear when a newer release ships, and release notes are often missing. The firmware index records what has been found so that a known build can still be located, verified and, where it has been archived, recovered after the vendor removes it.

For each firmware object the index records the model, version, download URL, size, availability checks and Wayback capture where one is recorded. Browse all indexed builds by model and version. The pages are generated from the source .dat files and the monitor’s data history.

  • Sonoff NSPanel Pro: the CoolKit CDN URL scheme, how to verify a URL, the update path and the hardware-verified flashing procedure. Its 86P and 120P builds are listed separately.
  • Shelly Wall Display: the OTA tracks, update endpoints and file format are on the Shelly Wall Display family page. The build index maps shared OTA tracks to each documented model.
  • Smatek S9E: the two analysed stock images and their differences are on the Smatek S9E page.

Before changing firmware on any panel, read Firmware backup and restore.

Panel Assistant’s assessments of new panel families and vendor firmware releases consider both security fixes and useful owner access, including potential CVE-2026-43499 routes. An indexed download is not evidence that a build has been assessed.

When an update is verified to close access that provides useful Panel Assistant functionality, the model’s guidance should name the exact working and affected builds, the lost capability, the security consequence of retaining the older build and the available recovery route. Deferring that specific update can then be recommended where the capability benefit justifies the security tradeoff for that setup. This is not a recommendation to retain every vulnerable firmware or downgrade a panel.

Before deciding, check your exact model and build against that guidance. A fix in upstream Linux does not prove a vendor has shipped it; an unchanged kernel version does not prove it is absent. Without verified build-specific evidence, treat both capability preservation and vulnerability status as unknown.

Comments

Comments are kept in this page's discussion on GitHub, so loading them connects your browser to GitHub. This browser remembers the choice and loads comments on other pages when you scroll down to them.

We Home Assistant and everything the Open Home Foundation does.

Last updated:

Release notes · Build 439 · b7d569d