SAP's Leadership Steps Up to the Plate While Security Questions Linger
Published on 09/02/2026 at 07:10 | Editorial boerse-global.de
The calculus for SAP investors has rarely been this layered. A board member is putting fresh capital behind the company's shares, the buyback machine keeps humming, and a regulatory headache has quietly dissolved — yet the stock finds itself wrestling with double-digit annual losses and a security patch queue that keeps growing.
Thomas Heinrich Saueressig, a member of SAP's executive board, acquired 1,500 shares on August 26 at EUR 178.30 apiece, for a total outlay of EUR 267,450. The purchase extends a pattern of insider conviction: another executive-level buyer had already picked up 1,700 shares at EUR 179.15 on August 14, worth roughly EUR 304,551. While a single transaction of this size rarely moves the needle on a DAX heavyweight, the signal is unmistakable — those closest to the company's strategy are willing to back it with their own money.
That confidence stands in contrast to the market's recent verdict. The stock closed Tuesday at EUR 183.52 after shedding 3.4 percent in a single session, making it one of the weakest performers in Germany's benchmark index. The 30-day picture tells a more forgiving story, with an 11 percent gain over that stretch, but the longer view remains uncomfortable: shares are down 12 percent year-to-date and 20 percent from twelve months ago. At current levels, the stock sits roughly 24 percent below its 52-week high of EUR 242.00, set on October 23.
A Regulatory Cloud Lifts
One overhang has cleared. Handelsblatt reported in late July that Germany's Federal Cartel Office concluded its preliminary examination of SAP's dispute with process-mining specialist Celonis without opening a formal abuse-of-proceedings case. For SAP, the outcome removes a source of tension that had strained relations with an important player in the domestic software ecosystem — and, just as significantly, eliminates a regulatory risk that investors had been forced to price into their assumptions for months.
The company has not been idle on the strategic front either. In mid-July, SAP closed its acquisition of Freiburg-based AI startup Prior Labs, committing to investments exceeding EUR 1 billion over four years. Prior Labs will continue operating as an independent brand — a playbook SAP has employed with earlier acquisitions to preserve the agility of smaller teams.
Regulatory scrutiny is a risk every business must manage — and workplace safety compliance is no exception. UK employers face similar pressures when inspectors review their safety documentation. A free toolkit with 41 ready-to-use templates and checklists helps you document risks properly and stay ahead of enforcement action. Download the free Risk Assessment Toolkit
Security Patches Pile Up
The technical side of the story is harder to wave away. On August 12, SAP released 28 new security advisories as part of its monthly patch cycle, five of them flagged with the highest "HotNews" priority. The most severe vulnerability sits in the SAP MII component, carrying a CVSS score of 9.9 out of a possible 10 — a rating that signals near-maximum exploitability. Security firm Defused has additionally reported active attacks targeting SAP Commerce Cloud in connection with a separate flaw.
For enterprises running mission-critical processes on SAP infrastructure, these disclosures are more than a footnote. They raise pointed questions about the resilience of the company's security architecture as its cloud footprint grows more complex — questions that carry particular weight at a moment when SAP is betting its future on a cloud transition. The next patch cycle is already scheduled for September 9, and both customers and investors will be watching how swiftly the company closes the gaps.
Buybacks and a Steady Hand at the Top
The capital return program, meanwhile, continues without interruption. Between August 3 and 7, SAP repurchased roughly 2.9 million of its own shares at an average price of EUR 169.72. That brings the year-to-date tally to approximately 5 million shares under a program carrying a total volume of EUR 10 billion and running through the end of 2027.
On the ownership front, BlackRock reported a voting-rights stake of 6.75 percent on August 14 — composed of 6.70 percent held via shares and 0.05 percent through financial instruments. The figure marks a marginal uptick from the previous disclosure of 6.74 percent, suggesting continuity rather than any aggressive repositioning by the asset manager.
A Market Still Weighing Contradictions
The composite picture resists easy categorization. Insider buying, sustained buybacks, a settled antitrust matter and a stable major shareholder base all point in one direction. Security vulnerabilities, active exploit reports and a stock that remains deeply below its recent peak pull in another. With 30-day volatility running at an elevated 43 percent, the market has yet to settle on a definitive read of the competing signals — leaving SAP's leadership, through its own purchases, to cast a vote that the broader market has so far declined to match.
