3,394 titles for a CRM that has no fingerprint: counting erxes, and the 9.8 that outlived its patch

erxes is an open-source experience operating system — a CRM with a plugin architecture — and it returns 3,394 title matches against 52 application fingerprints on 27 October 2026. That ratio of roughly sixty-five to one puts it in the same family as other white-labelled business applications in this collection, and the reason to care about the population is a set of 2024 records that include a 9.8 authentication bypass.

The measurement

ZoomEye, sub_type=all , one page per query, totals only, no host records retrieved:

| Query | Total |

|---|---|

| title:"erxes" | 3,394 |

| app:"erxes" | 52 |

The word itself is a lower-case brand term rather than an English word, which suppresses false positives in the title query without eliminating them: mirrors of the project README, agency portfolio pages and comparison articles all use it.

What the records say, and why the age matters

Three records from the…