SAP Shares Face Dual Challenges as Security Concerns Meet Growth Concerns

SAP shares fall after slightly missing cloud targets and disclosing critical security vulnerabilities. Analysts cut price targets as the company focuses on AI and buybacks.

The German software giant SAP is currently navigating a complex period marked by two significant pressures. Investor sentiment, already cautious following recent financial updates, has been further tested by the disclosure of serious security vulnerabilities within its core systems. This combination of factors contributed to the stock's decline to its lowest point in a year last week.

Financial Targets Slightly Missed, Cloud Momentum in Focus

The immediate catalyst for the recent share price weakness stems from the company's outlook for 2025. SAP reported that its cloud backlog grew by a currency-adjusted 25%, narrowly missing the 26% growth rate previously indicated by management. While the deviation is minor, it was sufficient to prompt a slight moderation in growth expectations for the current year.

The market's reaction was swift. Last Wednesday, the share price touched a new 52-week low of €164.96. Since the start of the year, the stock has declined by nearly 18%. A substantial gap of over 23% below its 200-day moving average underscores the prevailing downward trend.

Despite this correction, analyst sentiment remains largely positive, albeit with adjusted expectations. Recent target price revisions from major firms reflect this recalibration:

• Barclays: Reduced its price target from $348 to $283, while maintaining a Buy rating.
• BMO Capital: Lowered its target from $320 to $245, reaffirming an Outperform rating.

Critical Security Patches Issued Amid Heightened Scrutiny

Compounding the financial narrative is a critical update on cybersecurity. As part of its latest patch cycle, SAP was required to issue 15 new security notes. Two of these vulnerabilities carry the highest severity rating.

One particularly severe flaw exists within the Quotation Management Insurance module, which could, under specific conditions, allow attackers to execute remote code. A separate critical vulnerability permits the upload of untrusted data. The company has not yet disclosed whether these specific weaknesses have been actively exploited.

The Path Forward: AI and Buybacks

Attention now turns to upcoming catalysts for direction. The company is scheduled to release its first-quarter results on April 23, 2026. This report will be closely watched for evidence that its new AI offerings are translating into tangible contract signings and can help offset the slight deceleration in cloud growth. In the interim, an ongoing €10 billion share repurchase program provides a measure of support for the share price.