SAP's Quiet August: Regulatory Relief, a Steady Buyback, and the Weight of a 9.9-Rated Flaw

SAP shares grind higher as cartel probe ends, critical patch issued, buybacks continue; analysts split on trajectory.

The software giant's shares have been grinding higher through August, but the real story of the past fortnight is one of risk management rather than headline-grabbing catalysts. A regulatory probe has been shelved, the buyback machine continues to churn, and a security patch with a near-maximum severity score was quietly pushed out to customers — all while analysts remain split on the stock's trajectory.

The Cartel Office's quiet exit

The Bundeskartellamt has closed its preliminary examination of SAP without opening an abuse-of-proceedings case. The probe, which centered on the company's maintenance and support policies for on-premise installations, had lingered in the background without generating significant noise. The German authority's decision follows a similar conclusion from the European Commission, which had already wrapped up its own review of the same guidelines. For SAP, the outcome removes a regulatory overhang that had weighed on the valuation of its legacy on-premise business.

A security patch with teeth

On August 11, SAP released its monthly batch of security updates, publishing 28 new Security Notes alongside a GitHub advisory and two additional patches. Security firm Onapsis tracked 33 new and revised alerts, flagging five as "HotNews" — the company's most urgent classification — and nine more as high priority.

The standout vulnerability sits in the SAP MII module, where a code-injection flaw earned a CVSS score of 9.9, just a hair below the maximum possible rating. Another critical issue, this one in SAP Commerce Cloud, also drew top-tier severity marks. Customers running MII will likely prioritize those patches, though no concrete exploits or reputational damage have surfaced in connection with the flaws. For investors, the takeaway is less about the vulnerabilities themselves and more about SAP's responsiveness — the company moved quickly, and that counts for something in enterprise software.

Buyback cadence holds steady

The share repurchase program, meanwhile, is ticking along without interruption. During the week of August 10–14, SAP acquired 50,000 shares via Xetra, a figure that mirrors the previous week's interim report, which showed roughly 2.9 million shares bought back in the first week of August. The program, targeting €10 billion in total repurchases by the end of 2027, has now accumulated more than 5.12 million shares. That steady demand provides a supportive floor for the stock, even as it trades about 23% below its 52-week high of €242.00 set on October 23.

Analyst crosscurrents

The analyst community is sending mixed signals. Erste Group Bank raised its earnings estimate for SAP for 2026 on Tuesday, a counterpoint to recent target-price cuts from Berenberg, Barclays, Bernstein, and Citi. Barclays trimmed its target from €255 to €220 in late July but maintained an "Overweight" rating, citing near-term uncertainty around costs while acknowledging a stronger-than-expected cloud order pipeline. The consensus price target currently sits at €193.92, implying modest upside from Wednesday's close of €185.48, when the stock gained 1.6% — or 2.0% depending on the data feed — and now trades roughly 7.8% above its 50-day moving average of €172.02.

Cloud momentum and the AI price tag

The more constructive analyst views rest on second-quarter fundamentals. SAP reported a 27% jump in cloud backlog to €22.9 billion (26% on a currency-adjusted basis), with cloud revenues up 22% and the cloud ERP suite growing 25%. Total revenue rose 9%. The company also narrowed its 2026 non-IFRS operating profit guidance to a range of €11.8–12.2 billion, though the recent acquisitions of Dremio and Prior Labs will dilute results by more than €100 million.

Those deals are strategic bets on AI capabilities. Dremio brings a data lakehouse platform for integrating SAP and non-SAP data, while Prior Labs develops tabular foundation models for structured business data. SAP is investing over €1 billion in the latter across four years, keeping Prior Labs as a standalone unit. The spending underscores the balancing act: cloud growth is strong, but integration costs and margin pressure remain under scrutiny.

A stabilizing picture

None of these developments alone moves the needle dramatically. Together, however, they paint a picture of a company methodically working through operational and regulatory to-dos while the buyback hums in the background. For shareholders, the message is continuity rather than surprise — and in a market that has punished uncertainty, that may be the most valuable signal of all.