SAP's Critical April: Security and Earnings Collide at a Low Point

SAP shares near 52-week low ahead of pivotal earnings. A critical 9.9 CVSS security flaw and cloud backlog growth are key investor concerns for the April 23 report.

SAP shares are navigating a treacherous April, caught between a severe security crisis and a pivotal earnings report. The stock recently touched a new 52-week low of EUR 139.12 on April 10, leaving it roughly 45% below its 52-week high of EUR 271.60 and down about 25% year-to-date. This sets a tense stage for the company's first-quarter 2026 results, scheduled for release on April 23 at 22:05 CEST.

The immediate operational challenge is a critical security flaw. SAP's April Patch Day revealed a SQL injection vulnerability, CVE-2026-27681, with a near-maximum CVSS score of 9.9. The flaw resides in the ABAP program of Business Planning and Consolidation (BPC) and Business Warehouse (BW), allowing a low-privilege user to upload and execute arbitrary SQL files. This opens the door to data theft, report manipulation, and database corruption. SAP has issued Security Note 3719353 to fully deactivate the executable code in the affected program, urging customers to patch immediately.

Beyond this headline flaw, the patch batch addressed 21 other security notes. Among them is CVE-2026-34256, a missing authorization check in SAP ERP and S/4HANA that could let attackers execute or overwrite ABAP programs. While SAP reports no known active exploitation of these vulnerabilities, the severity underscores the constant security demands on enterprise software platforms. For clients evaluating cloud migrations, platform integrity is a tangible factor in purchasing decisions.

Investor focus, however, is squarely on the upcoming financial figures. The key metric will be the Current Cloud Backlog, a leading indicator for future revenue from signed cloud contracts. SAP has previously highlighted that its AI component, SAP Business AI, is now included in a majority of cloud deals and serves as a key growth driver. Yet, a potential headwind looms: manufacturing clients may delay IT spending or cloud migration plans due to ongoing US import tariff concerns. Whether this impact is visible in Q1 figures is a central question for the report.

A recently announced share buyback program of up to EUR 10 billion, with a portion to be invested by July 2026, has so far failed to provide lasting support for the share price, which currently hovers around EUR 151. A short-term rally of about eight percent over the past week shows tentative buyer interest, but its sustainability hinges entirely on the April 23 announcement.

Should the cloud growth figures disappoint, the stock could quickly relinquish its recent gains. The April low of EUR 139 is less than nine percent away, a reminder of the fragile sentiment. For SAP, this week represents a dual test: demonstrating robust security to its enterprise user base and convincing investors that its cloud transformation remains firmly on track.