SAP's Two-Speed Wednesday: AI Optimism Lifts Shares While Maximum-Severity Patches Land Quietly

SAP CEO details multi-model AI approach, opens Joule to on-premise users; shares up 1.2% despite weak adoption data.

Shares in the Walldorf-based software giant carved out one of the DAX's strongest performances on Wednesday, even as the broader German index drifted lower. The stock climbed to €184.20, a gain of 1.2 percent from the prior session, buoyed by chief executive Christian Klein's appearance at the Goldman Sachs Communacopia + Technology conference. The move snaps a soft patch that had left the equity nursing a 13 percent decline since the start of the year.

A deliberate hedge on AI models

Klein used the stage to distance SAP from any single large-language-model provider. Rather than locking in with a specific vendor such as OpenAI or Anthropic, the company is engineering its AI agents so they can swap the underlying language model within a single day. The pitch is aimed squarely at customer demands for swifter integration, a transparent return on investment, and tighter control over total cost of ownership. SAP intends to concentrate its firepower on complex business processes, leaving simpler language-model chores to others.

The CEO did acknowledge weak spots in the portfolio. Concur Bookings, where SAP partners with American Express, and SuccessFactors Learning in scenarios involving direct agent-to-agent communication were both singled out as areas needing work.

On-premise customers get a slice of the AI pie

In a move that will resonate well beyond the cloud-first narrative, SAP is opening its AI portfolio — including the Joule assistant — to on-premise customers running ECC and S/4HANA systems. Access is slated for the third quarter of 2026, though with strings attached: only RISE customers holding a Max Success Plan qualify, and Joule's full feature set remains a cloud exclusive.

That restriction is likely to fuel debate. The DSAG investment report for 2026 paints a sobering picture of adoption: barely three percent of users are productively deploying SAP Business AI, while 77 percent have turned to external AI solutions. The clock is also ticking on legacy infrastructure — maintenance for the classic Business Suite ends in 2027, with only paid support available from then until 2030.

Broader German market data tells a similar story of hesitancy. A Bitkom survey of 603 companies found just six percent using SAP's Joule, trailing ChatGPT's 76 percent and Microsoft Copilot's 35 percent by a wide margin. The Bitkom president used the findings to criticise the weak uptake of European AI providers across the board.

Patch day delivers maximum-severity fixes

Wednesday also marked SAP's monthly security patch cycle, with the company publishing 22 new and updated security notes. Five were flagged as HotNews — the vendor's most urgent classification — and six more received a "high" priority rating. Among the fixes are two zero-day vulnerabilities, designated OVERPASS and S4GET, carrying CVSS scores of 10.0 and 9.8 respectively. The higher of the two, a critical flaw in the Extended Passport (EPP) Processing module, sits at the absolute top of the severity scale. There is no evidence of active exploitation to date.

Security services firm Onapsis had scheduled a joint webinar with SAP for 10:00 am US Eastern Time to walk customers through the patches. For organisations running SAP systems, a HotNews designation typically translates into urgent action to deploy the fixes.

The market, however, has shown little reaction to the security news. The shares' Wednesday gain was driven by the AI narrative rather than any patch-related relief, and the stock continues to trade about 8 percent above its 200-day moving average of €168.36 — a sign of medium-term stabilisation, even if the distance from the 52-week high of €242.00, set in late October last year, remains substantial.

Analysts keep their powder dry

UBS reaffirmed its neutral stance on the stock Wednesday with a price target of €201, maintaining the downgrade from "Buy" it issued in late August. At the time, the Swiss bank cited slower-than-expected AI project implementation among customers and decelerating cloud growth as reasons for the more cautious view. That assessment predates Wednesday's patch day and reflects a longer-term read on the business rather than a reaction to the security disclosures.

The analysts also point to a gap between promise and delivery in SAP's agent portfolio. Of the 37 AI agents announced so far, only 18 are actually available. The company's year-end targets — more than 200 agents and over 50 assistants — are ambitious, and execution against those goals will likely shape how the equity is valued in the months ahead.

For investors, Wednesday encapsulated the tension running through the SAP story: a CEO articulating a coherent, multi-model AI strategy while the ground-level adoption data remains thin, and a security team closing maximum-severity holes that keep arriving with metronomic regularity. The share price response suggests the market is willing to give Klein the benefit of the doubt on AI — for now. Whether that translates into measurable revenue effects is a question that will only be answered once the promised agent fleet actually ships.