SAP's Buyback Keeps Rolling as a Perfect-Ten Security Flaw Steals the Headlines
Published on 09/11/2026 at 13:31 | Editorial boerse-global.de
SAP's capital-return machine shows no sign of slowing, even as the software giant finds itself juggling an ambitious AI rollout, a fresh batch of critical security patches, and a share price that keeps losing ground.
Between 31 August and 4 September, the Walldorf-based company repurchased 576,917 of its own shares for roughly EUR 107.9 million, bringing the total under the current program to 6.43 million shares. The steady buying underscores management's commitment to returning capital to shareholders — a signal intended to highlight the company's underlying worth, though it has done little to halt the recent slide.
A Stock Under Pressure
The equity closed Thursday at EUR 176.70, down 2.0%, before recovering slightly to EUR 175.38 on Friday — a decline of 0.8% from the prior session. Since the start of the year, the stock has shed 16%, and over a twelve-month horizon the loss reaches 20%. Measured against its 52-week high of EUR 242.00, set in October 2025, the shares now sit 28% lower.
What is weighing on sentiment is less the company's financial performance than its strategic positioning in the AI race. Analysts have flagged unfinished work on integrating AI assistants into the product lineup, a concern that has trailed SAP even as its cloud business posts solid gains. UBS reaffirmed its neutral rating on Tuesday, keeping a price target of EUR 201 — well above current levels, yet a reflection of the caution with which the analyst community views the mix of growth opportunities and recurring security risks.
Should investors sell immediately? Or is it worth buying SAP?
400 Agents and a Goldman Sachs Stage
SAP put its AI ambitions front and center Tuesday at Goldman Sachs' Communacopia + Technology Conference. According to the conference transcript, the group plans to launch 400 agents in September, with more to follow in the autumn. The push fits a broader series of announcements aimed at cementing SAP's position in the contest for AI-driven business processes. Specifics on where those agents will be deployed, or what revenue they might generate, were not disclosed.
The AI narrative runs alongside a steady stream of customer wins. Dairy processor Tirlán is preparing an independent SAP landscape to support further growth, while the HARTING Technology Group has signed on for a long-term RISE with SAP agreement. Lockheed Martin is leaning on SAP SuccessFactors solutions for its workforce transformation, and NTT DATA is deploying SuccessFactors together with the Joule AI assistant for a global HR overhaul. Taken together, these reference customers suggest that industrial clients remain committed to SAP's cloud migration — a contrast to a share price dominated by AI skepticism.
Patch Day Delivers a Maximum-Severity Flaw
The monthly security patch day, held Tuesday, brought 19 new Security Notes plus one update, including four critical vulnerabilities. The most severe is CVE-2026-44756 in SAP Extended Passport Processing, which carries the maximum CVSS score of 10.0. Another flaw, CVE-2026-58240 in the NetWeaver Message Server, also reaches critical territory with a CVSS rating of 9.8.
Media reports put SAP's September patch total at 20 vulnerabilities, singling out an additional critical credential-disclosure issue in the CAP library sap/cds-mtxs as well as a critical weakness in SAP GUI for Java. Further High and HotNews entries touch cloud and NetWeaver components, including SAP Commerce Cloud and the Integration Suite. For customers running extensive SAP environments, the upshot is familiar: renewed pressure to keep patch management on track.
The Road to 21 October
Such security bulletins are hardly unusual for a vendor of business-critical software, but they add to customers' short-term workload and push IT security back into the spotlight. Investors, it seems, are weighing the recurring patch-day disclosures more heavily than individual contract wins or AI announcements — a pattern that has now played out repeatedly.
The next set of quarterly figures, covering the third quarter of 2026, is scheduled for 21 October. Until then, the market is likely to keep oscillating between SAP's solid cloud metrics and the unresolved question of how quickly the company can translate its AI strategy into convincing product results. The ongoing buyback remains a stabilizing factor that shareholders must weigh against the near-term weakness in the stock.
Ad
SAP Stock: New Analysis - 11 September
Fresh SAP information released. What's the impact for investors? Our latest independent report examines recent figures and market trends.
