SAP Patches Maximum-Severity Flaw While an Indian Court Forces Support Restart

SAP issued 19 security notes, including a maximum-severity Extended Passport bug, while a Delhi court ordered it to resume support for Nayara Energy.

A memory-corruption bug rated 10.0 on the CVSS scale sits at the top of SAP's latest patch batch, a reminder that keeping sprawling enterprise landscapes sealed off from intruders is as much a part of the Walldorf company's routine as shipping new products. The group published 19 fresh security notes alongside a supplementary update, with the flaw in the processing of SAP Extended Passport drawing the maximum risk rating. Customers who apply the fixes can close off a route to unauthorized access across their core applications.

Patch cycles of this kind are standard operating procedure for large software vendors, and prompt updates underpin the uninterrupted running of business-critical processes at major accounts.

Portfolio Push Continues Alongside Maintenance Work

Product expansion has not paused while the security team works. In mid-September the company made SAP Ariba Spend Analysis and Insights generally available, a tool aimed at helping procurement organizations turn existing spend data into fuel for automated workflows. SAP also placed the TabPFN-3.5 Plus model into SAP AI Core, enabling instant forecasts built on tabular data. Its support offering, meanwhile, was restructured into three Success Plans: Foundational, Advanced and Max.

Customer wins have followed. US defense contractor Lockheed Martin completed the productive go-live of SAP SuccessFactors solutions including Employee Central and Recruiting, while esports organization Team Liquid leans on the SAP Business Data Cloud in its competition preparation.

Delhi Court Sides With Nayara Energy

Not every development this week came from the product roadmap. SAP's Indian subsidiary was ordered by the top court in New Delhi on Monday to immediately resume software and support services for energy supplier Nayara Energy, which covers just under eight percent of India's energy demand. The dispute traces back to the summer of last year: after Nayara was added to a European Union sanctions list in July 2025, SAP shut off access to its support portal within days. The court has now classified that move as a provisional breach of contract.

Judge Vikas Mahajan rejected SAP's defense. The company had argued that support flows through German parent SAP SE, making European sanctions and German export controls an insurmountable obstacle. The court found instead that the contracts are governed by Indian law, which takes precedence over foreign rules, and that the licenses and services are global in scope rather than tied exclusively to German servers. The ruling underscores the mounting risk for international technology groups forced to navigate between Western sanctions regimes and local contractual duties in emerging markets. Restoring support immediately is meant to keep the Indian major customer running without disruption.

JPMorgan Stays on the Sidelines Ahead of October 21

Analysts, for their part, are already looking past the legal headlines toward third-quarter figures due on October 21. JPMorgan left its rating on SAP shares at "Neutral" with a price target of 175 euros. Analyst Toby Ogg cited valuation as the reason for his restraint: the stock's earlier run-up has raised the bar for the company once again. He expects the upcoming quarterly results to land in line with prevailing market forecasts. Erste Group Bank has also turned more cautious of late, nudging its estimate for adjusted earnings per share slightly lower.

Shares Shrug Off the News as Buybacks Roll On

The equity showed little reaction to either thread. SAP changed hands at 185.76 euros in Xetra trading, a gain of 1.7 percent on the day, with confidence in the robust cloud business—which delivered a solid revenue increase in the second quarter—dominating sentiment. The stock sits 9.2 percent above its 200-day moving average.

Capital management continues to underpin the market. Buybacks remain a core plank of the financing strategy: media reports indicate the company acquired 50,000 of its own shares on Xetra between September 14 and 18, at a total volume of 9,278,590.00 euros.

Steady product updates and fresh use cases keep SAP's operating story moving forward, while dependable protection of existing customer installations forms the foundation on which new platform services are sold.