PHP Vulnerability Responses by Company

Nottingham City Transport

Global cloud / infrastructure
Aliases / services
Nottingham City Transport / Nottingham City Transport Limited / NCTX Buses
Official website
https://www.nctx.co.uk/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Website and app patched or protected by WAF
Response information checked
2026-10-25 Rechecked: 2026-10-27

Nottingham bus operator running its website and the NCTX Buses app.

On 22 October, published confirmation from supplier Passenger that covered active services and customer websites were either patched or WAF-protected, with no signs of compromise found in its review.

This recheck could not revalidate all listed information against current official sources. The previous verification date is retained. Check official notices or support for current availability and required action.

What users should do

Use NCT's website and app. Ask NCT for details, including whether a component is patched or protected by WAF.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://apps.nctx.co.uk/PHP2Shell-UpdateResponse evidence
  2. Operating entityhttps://www.nctx.co.uk/nctx-buses-app-terms-and-conditionsService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments