SAP's Security Flaw and State Contract Pull Shares in Opposite Directions

SAP shares rise 3% after 52-week low, but critical security vulnerabilities and 33% YTD decline overshadow government cloud contract wins.

SAP shares managed a modest rebound on Tuesday, climbing nearly 3% to €134.68, but the gain did little to mask a broader crisis. The stock remains down roughly 33% since the start of the year, having just brushed a fresh 52-week low of around €130 a day earlier. Underlying that weakness is a combination of acute technical damage and a severe security vulnerability that has shaken customer confidence.

The Bundesamt für Sicherheit in der Informationstechnik has cleared SAP to handle highly sensitive data for German federal authorities, and the company secured a lucrative contract with T-Systems to serve the public sector. This win is designed to lock in long-term recurring revenue in a highly regulated market. Separately, SAP landed a €250 million deal with Deutsche Telekom for sovereign AI cloud services for German public administration, and committed €300 million to expansion in France. These commercial successes, however, have been overshadowed by a much less welcome development.

SAP’s June patch cycle revealed several critical security holes. The most alarming is a flaw in the SAP Kernel’s RFC protocols, carrying a CVSS score of 9.8 out of 10 — nearly the maximum possible severity. It allows memory corruption, which could lead to unauthorized access, identity theft, and operational disruptions in core ERP environments. Another vulnerability involves SAML XML signature wrapping. For a company that markets its "Autonomous Enterprise" vision — AI agents deeply embedded in business processes — the timing could hardly be worse. Integrating AI into critical systems demands ironclad security, and that is exactly what is now in question.

On the charts, the picture remains bleak. SAP’s stock is trading more than 29% below its 200-day moving average, while the relative strength index stands at 31.4, indicating extreme selling pressure. The technical backdrop reflects not just the security scare but months of eroding investor trust. Still, Wall Street analysts see value. A consensus of 20 analysts rates the shares a "Moderate Buy" with a median price target of $283.40 — more than double the current level.

Investors are now in a waiting game. Since the start of the week, SAP has entered a strict quiet period, with management declining to comment on current business trends. The next major milestone is the release of second-quarter results on July 23, 2026. Until the numbers are out, the stock is likely to remain volatile, caught between the promise of government-backed cloud revenue and the fallout from a security crisis that tests the very foundations of its AI-driven growth story.