SAP’s Vision Test: Security Vulnerabilities and Shrinking Margins Push Shares Further from Peak

SAP shares drop 27% YTD as critical vulnerabilities, margin pressure, and regulatory scrutiny challenge its cloud transition narrative.

SAP’s stock has fallen into a double bind, where a string of critical security flaws meets rising hardware costs and a market that is losing patience with the cloud transition. On the day the company patched 15 vulnerabilities — four of them rated critical — shares slipped 3.67 percent to €149.56, briefly breaching the 100-day moving average. But that was not the only blow. In a separate session earlier this week, the stock tumbled nearly 5 percent to €147.52, bringing its year?to?date decline to almost 27 percent and leaving it just 9 percent above the 52?week low of €135.52.

The security alerts are alarming enough. Three vulnerabilities carry a CVSS score above 9.0, including a SAML authentication flaw (CVE?2026?44748) rated 9.9 and an unauthenticated memory corruption in the ABAP kernel (CVE?2026?27671) rated 9.8. SAP warned that hackers could seize full control of affected systems, forcing clients running NetWeaver, Commerce Cloud or the ABAP platform to deploy urgent fixes. For a company that trades on trust and mission?critical enterprise processes, that kind of breach risk chips away at the very narrative SAP is selling.

Yet the deeper drag on the share price comes from a different kind of vulnerability — margin pressure. Goldman Sachs cut its earnings expectations ahead of the next quarterly report, citing climbing hardware costs linked to cloud and AI infrastructure. The bank still backs the long?term strategic thesis, but the market is now pricing in a slower, more expensive ramp to profitability. SAP now sits 22 percent below its 200?day average, a punishing re?rating for a stock that was a consensus buy last year.

Customers are adding to the skepticism. The German?language SAP User Group reports that while the relevance of SAP’s ecosystem remains intact, companies are “investing more selectively and critically.” The shift to S/4HANA is proceeding, but at a controlled, incremental pace — each migration decision weighed against cost, complexity and lock?in risk. Fewer clients are willing to buy a grand vision; they want proof that cloud and AI will deliver measurable returns.

To complicate matters further, Brussels has opened a competition probe into SAP’s maintenance practices, examining whether the company unfairly restricts third?party support providers. SAP has moved to settle by offering customers more choice, and if no objections emerge, the case will be dropped without a fine. Still, the regulatory distraction adds to a sense that SAP’s dominance is no longer taken for granted.

Meanwhile, the company is doubling down on a geopolitical bet. It is building sovereign cloud and AI capabilities in France, explicitly tying the initiative to European digital sovereignty and partnering with projects like Bleu and Delos. The move could strengthen pricing power and political relevance — but it also requires capital, operational complexity and time. Markets love scalable software, but they grow nervous when software starts to smell like infrastructure.

Operationally, the picture is not all bleak. First?quarter cloud backlog rose to €21.9 billion, a currency?adjusted increase of 25 percent, and cloud revenue grew 27 percent. Those numbers confirm that the transition is happening. Yet with annualized volatility above 44 percent and an RSI of 44, the stock is stuck in a zone that feels more like a stress test than a turnaround. The €2.50 dividend signals continuity, but it does not answer the question that weighs on every price level: Can SAP turn sovereignty, cloud and AI into a profit model that satisfies both the boardroom and the trading floor?