SAP's Patch Day, Boardroom Exit and Retail AI Lab Cap a Busy Week of Cloud Wins

SAP packed an unusually dense stretch of announcements into the first half of the week, spanning software security, a supervisory board resignation, cloud customer wins and the opening of a retail innovation space. The common thread: a company pushing hard on both the plumbing and the shop window of its cloud business.

Security took the spotlight on Tuesday, when SAP issued 35 new security notes as part of its November Security Patch Day, alongside four GitHub security advisories. Several of the vulnerabilities carried a CVSS score of 10.0 — the maximum severity rating. SAP also refreshed three previously published notes, meaning the release combined fresh disclosures with revisions to existing guidance, all published through its support portal.

A Board Seat Vacated Overnight

The personnel news landed a day later. Qi Lu stepped down from SAP's supervisory board with immediate effect on Wednesday. According to Handelsblatt, SAP confirmed that personal reasons drove the decision. The newspaper also floated a possible link to US sanctions targeting Lu's venture capital fund Miracle Plus — a connection SAP has not substantiated.

On the commercial front, AstraZeneca is deepening its long-standing partnership with the Walldorf-based group. The pharmaceutical giant is migrating to SAP Cloud ERP Private under the RISE with SAP program, a company-wide switch that builds on two decades of collaboration between the two organizations.

Retail got a physical footprint as well. SAP and VF Corporation opened S.Fashion in Walldorf on Wednesday, a fashion store the software maker describes as a productive test environment for AI-supported, end-to-end commerce processes — and as a laboratory for retail workflows and the shopping experience.

Analyst Houses Weigh In

Recognition from the research firms arrived earlier in the week. On Monday, Gartner placed SAP as a Leader in its 2026 Magic Quadrants for Cloud ERP serving both product-centric and service-centric enterprises — the fifth consecutive time in each category, according to the company. SAP then said it had been positioned as a leading vendor for warehouse management in two IDC MarketScapes 2026, covering manufacturing and retail deployments.

Transparency is the next frontier. SAP announced that customers will be able to see product-level data on the carbon footprint and energy consumption of its cloud software, broken down by individual product.

Energy Platform, Buyback and a Date for the Diary

Partnership activity continued Tuesday, when SAP and Capgemini expanded their collaboration on SAP Distributed Energy Resources. The pair plan to co-develop a platform for utilities and support its market launch — covering both build and go-to-market.

The same day brought another mandatory disclosure on SAP's share buyback. Over the reported weekly window, the company repurchased roughly 465,000 of its own shares via XETRA, lifting the cumulative total under the program to about 9.6 million shares.

Investors looking for the next hard numbers have a fixed date: SAP will publish preliminary fourth-quarter and full-year 2026 results on January 28, 2027, with an analyst and investor conference scheduled for 7:00 a.m. CET. Before that, an online event on November 18 will walk through innovations in SAP Cloud ERP Private. The stock traded 0.7% higher on the day, with the advance accompanying the run of recognition and cloud announcements.