SAP Shares Slide as Security Vulnerabilities and Oracle’s Capex Shock Amplify Cloud Growth Fears

SAP shares tumble 12% weekly as JPMorgan warns Oracle's cloud slowdown signals sector risk, while critical security patches and rising hardware costs weigh on investor sentiment.

The stock has spent the session hovering dangerously close to its 52-week low of €135.52, a level that has already been tested multiple times this year. Two distinct pressures converged this week: a warning from JPMorgan that its US rival Oracle’s cloud deceleration is a red flag for the entire enterprise software sector, and a fresh security patch that closed 15 vulnerabilities — four of them critical — in SAP’s own product suite. Investors, already nursing a 30% year-to-date decline, sold aggressively on Thursday, pushing the shares to €141.40 and racking up a weekly loss of twelve percent.

JPMorgan analyst Toby Ogg kept his rating on SAP at “Neutral” with a price target of €175, but the note he published carried a distinctly cautious tone. Ogg sees concrete risks to the Walldorf-based company’s enterprise business, arguing that Oracle’s slipping cloud momentum is a clear sector-wide warning. The market took the message to heart: the stock’s recent slide has blown a hole through what had been a fragile recovery attempt, and the distance to the 200-day moving average near €188 has widened to almost 25%.

Adding to the unease, Oracle itself triggered a selloff when it posted record revenue but saw its after-hours stock plunge — the culprit being a management plan to spend as much as $95 billion on capital investments through 2027. That figure reignited fears that the generative AI boom will devour margins rather than expand them. Goldman Sachs has already cut its margin forecasts for SAP, flagging sharply rising hardware costs in the second half. For a company whose cloud narrative relies on scalability and improving profit margins, the Oracle overhang is a bitter reality check.

Meanwhile, SAP’s own operational news this week was a mixed bag. The company released a security bulletin on Thursday that addressed fifteen vulnerabilities, four of which it classified as critical. Particularly worrisome is a defect in SAP NetWeaver that allows attackers to bypass authentication. The group says it has not detected any active exploitation, but the disclosure adds a layer of reputational risk at a time when investor trust is already frayed. On the positive side, the company’s service partner Komm.ONE has begun a large-scale rollout of the latest software generation across the public sector, and board member Sebastian Steinhäuser was awarded roughly 1,300 shares under the usual compensation program — a routine allocation that does little to soothe market sentiment.

The dissonance between SAP’s long-term vision and its short-term stock performance could hardly be starker. At the Sapphire conference in Orlando, management unveiled an aggressive push toward the “Autonomous Enterprise,” a concept that reimagines the core ERP system as an AI-driven platform. CEO Christian Klein presented the shift as a present-day reality, citing more than fifty Joule assistants and over two hundred specialized agents already in customer use, backed by a multi-million-euro partner fund. The pitch rests on the conviction that five decades of accumulated business process data create a moat no generic large language model can cross. Yet the market is fixated on the cost side: the same AI transformation that promises a new product cycle also threatens to hollow out margins and disrupt existing software architectures.

From a technical perspective, the chart looks precarious. The stock has already shed a third of its value in 2026 and is now just a few euros above the year’s low. A break below €135.52 would open the door to further selling, given the wide bid-ask spread and elevated volatility that reflect deep nervousness among holders. The next major catalyst arrives on July 23, when SAP reports second-quarter earnings for fiscal 2026. At that point, management must demonstrate that the Orlando vision translates into measurable cloud bookings and, crucially, that margins can be held as the AI infrastructure bill comes due.