Security priority
Teltonika urges RutOS updates
A critical advisory covers RutOS 7.22-7.24.2. Audit deployed versions and move affected devices to a suitable 7.24.3-or-later model build.
Read the advisory summary
INNON Tech Bulletin · November in 5 2026 (Issue 03)
Monthly technical update
Tech
Bulletin
Security, software and building-control updates from Innon and the manufacturers we supply.
At a glance
November in 60 seconds
Five updates with practical implications for specifications, maintenance and live BMS sites.
9partner brands featured
5priority stories
1Innon development preview
Innon development
A new way to view Niagara
Innon Dashboard turns Niagara station data into a clean desktop and mobile view. Version 1.0 is planned later in November after the closed beta.
Explore DashboardProduct lifecycle
First-generation Touch Point enters last-time-buy
iSMA's partner notice sets 31 December 2026, or remaining stock, as the ordering limit. Touch Point 2.0 is the replacement route.
Plan the transitionFirmware update
Vicki 5.0 adds direct sensor pairing
MClimate's update lets Vicki use room temperature from an HT Sensor through device-to-device communication and improves fallbacks.
Read the changesSoftware maintenance
Reflow 2.0.2 improves security
The October release addresses project and role access, draft preview reliability and licensing. Reflow 1 project migration remains pending.
Innon Energy
More ways to work with building data
Our own Niagara tools continue to develop, with a simpler station view leading the next release.
Dashboard preview
A cleaner view of your Niagara station
Innon Dashboard brings building data into a modern, simplified view on desktop and mobile. Instead of navigating through PX pages to find what you need, you can see key information about your building in one place.
Following the closed beta, version 1.0 is planned for release later in November. It is expected to include UI improvements, a roles and permissions manager, and better mobile support.
Interested in trying it? Contact Innon about beta access and help shape the Dashboard and future Niagara tools.
Help shape Innon DashboardModules in development
Practical tools for Niagara
The PID Loop Optimiser, Innon LoRaWAN driver and PX widgets remain active areas of development. The optimiser is designed to help tune PID loops; the LoRaWAN driver helps bring sensor data into Niagara; and the widgets extend what teams can present on PX pages.
Interested in testing the modules or helping shape future features? Contact our support team to discuss beta access.
Join the beta conversationJ2 Innovations · FIN Intelligence
Explore your Niagara BMS data with AI
J2's FIN Framework brings building systems together for monitoring, control and visualisation. FIN Intelligence, built into FIN Framework 5.3, adds a building-aware assistant. Operators can ask natural-language questions about alarms, energy use and operating history instead of working through multiple screens and reports.
Innon is inviting Niagara teams to explore a project-specific trial using their own BMS data. FIN is a separate platform, not a native Niagara module, so we would agree the data connection, permissions and architecture before a pilot.
Priority stories
Two updates to act on
An urgent router advisory and a Reflow maintenance release both warrant a check against deployed systems.
Teltonika · 30 October
CVE-2026-82104: audit affected firmware
- Teltonika identifies a critical HTTPS security-check bypass that could permit arbitrary commands without authentication.
- Affected versions are RutOS 7.22-7.24.2 and TswOS 1.9-1.10.
- The vendor says the issue is fixed in RutOS 7.24.3 and TswOS 1.10.1 or later.
- Check each installed version, then use the correct approved firmware for that model and test the rollout.
Reflow · October 2.0.x
Reflow 2.0.2 improves security
- Version 2.0.2 checks project assignments on every view request, closing a route to unassigned projects.
- Alarm date-range filters, remote-point histories, enum commands and device exports also receive fixes.
- Version 2.0.1 addressed draft-saving and publishing reliability.
- Reflow 2 cannot yet read Reflow 1 projects; the vendor says migration is in development.
iSMA Controlli
The next chapter for iSMA
iSMA is moving ahead on two fronts: Touch Point 2.0 succeeds the first-generation range, and IMI has announced an agreement to acquire the company.
Partner notice · 21 October
Touch Point: first generation enters last-time-buy
iSMA says orders for first-generation Touch Point units can be placed until 31 December 2026 or while stock lasts. Touch Point 2.0 is the direct, backward-compatible replacement with equivalent sensor and colour options. Standard warranty support for existing units continues until expiry.
The end-of-life dates come from an iSMA partner email and FAQ; the public link below describes the successor range.
Explore Touch Point 2.0Company news · 7 October
IMI agrees to acquire iSMA Controlli
IMI announced an agreement to acquire iSMA Controlli for €63 million. Completion was expected in Q4 2026, subject to customary regulatory approvals. The transaction is not described here as complete and does not, by itself, announce a change to products or support.
Read iSMA's statementTridium · Niagara Framework
Niagara 4.15u6 and 4.14u7 are available
Both October updates continue their respective Niagara 4 maintenance branches. Niagara 4.15 is the active long-term support release; 4.14u7 serves installations remaining on 4.14.
Active LTS branch
Niagara 4.15u6
Review the build-specific fixes in Tridium's release notes. Check supported hardware and module compatibility separately before planning an upgrade on the 4.15 line.
4.15u6 release notes4.14 maintenance branch
Niagara 4.14u7
For existing 4.14 deployments, review this branch's own release notes rather than assuming the 4.15 changes and upgrade path are identical.
4.14u7 release notesFirmware and fixes
Room-control updates worth planning
MClimate and Milesight both published useful changes, with different commissioning implications.
MClimate Vicki · firmware 5.0
Initial direct device-to-device communication with an MClimate HT Sensor lets Vicki use room temperature for radiator control. It also adds fallback behaviour and fixes heating-schedule start/end date detection.
Check before upgrade
Review the operational mode, HT Sensor setup and FUOTA instructions before changing a live room.
Milesight WT401 · firmware 2.2
Adds Bluetooth communication with a compatible controller and plan-rule switching options for the wireless thermostat.
Check before upgrade
From v1.2 or earlier, the device resets and cannot be downgraded. Milesight specifies version-dependent ToolBox and FUOTA steps.
Integration watch
Practical guidance for connected buildings
Two October resources focus on commissioning and maintaining the links between field devices and a BMS.
Enless · 25 October
LoRa Easy sensors into Niagara
Enless demonstrates registering compatible wireless sensors in a BACnet receiver, checking radio reception, then discovering BACnet objects in Niagara Workbench through a JACE. The receiver supports up to 50 compatible Enless sensors over BACnet/IP or MS/TP.
Specify carefully: this example uses Enless LoRa Easy, not LoRaWAN. The two radio approaches are not interchangeable.
MSA / FieldServer
Gateway security after handover
FieldServer's October articles urge integrators to treat credentials, firmware, exposed interfaces and remote access as ongoing site responsibilities. They are guidance, not a new October patch announcement.
Milesight case study
People sensing across office buildings
Milesight describes a French property portfolio using more than 1,000 VS133-P sensors across around 60 office buildings. This is a manufacturer case study, not a new product release or independently measured outcome.
Read the case studyBefore customers specify or upgrade
The important caveats in one place
These are the checks most likely to affect a quotation, commissioning plan or maintenance visit.
The 30 October advisory affects RutOS 7.22-7.24.2 and TswOS 1.9-1.10. Check the installed version on each device and use the appropriate model-specific approved firmware; do not assume every deployed unit is affected.
Reflow 2 does not yet read Reflow 1 projects. Both can coexist on one station, but plan a separate migration once the vendor provides its conversion path.
The first-generation last-time-buy window ends on 31 December 2026 or when stock runs out. Confirm the Touch Point 2.0 replacement model; existing first-generation units retain standard warranty support.
The v2.2 upgrade path depends on the installed version. Upgrading from v1.2 or earlier resets the device and cannot be downgraded; review Milesight's ToolBox and FUOTA instructions before scheduling work.
The published BACnet receiver example uses Enless LoRa Easy, not LoRaWAN. Specify compatible sensors and the correct receiver before using its Niagara commissioning steps.
Version 1.0 is planned for later in November after a closed beta; it is not yet a general-availability announcement. Ask Innon about beta access and final release timing.
Contact Innon to find out how you can leverage AI on your Niagara projects and discuss the best integration route for your BMS.
4.15u6 and 4.14u7 are separate maintenance branches. Check Tridium's build-specific notes, controller images, licence/SMA and third-party module compatibility before upgrading.
Leave a comment