SAP's September Squeeze: A Perfect-Ten Flaw, 400 Promised Agents, and a Stock That Can't Find Its Footing
Published on 09/10/2026 at 11:52 | Editorial boerse-global.de
SAP's September got off to a split-screen start. On one side, the software giant pushed out 19 new Security Notes as part of its regular patch cycle, alongside additional updates flagged by third-party researchers. On the other, management took to the Goldman Sachs Communacopia + Technology Conference to talk up an AI roadmap that includes the launch of 400 agents this month, with a further wave slated for the fall.
The security side of the ledger carries the sharper edge. Among the fixes was a critical memory-corruption vulnerability in Extended Passport Processing, tracked as CVE-2026-44756, which earned a maximum severity score of 10.0 on the CVSS scale. That is as bad as it gets — such flaws are considered potentially fully compromising for affected systems.
The September batch touched a broad swath of the portfolio: NetWeaver, S/4HANA, the Integration Suite, and SAPUI5 all received patches. A particularly serious hole in the NetWeaver Message Server, where missing authentication could hand attackers access, drew attention. Security firm Onapsis added further items to the list, including weaknesses in SAP Commerce Cloud, the NetWeaver Business Client, the ABAP Developer Tools, and the Commerce Cloud Search and Navigation module. For IT teams running SAP systems on-premises or in the cloud, the steady drumbeat of disclosures means patch management remains a permanent workload — a burden the entire software industry shares, but one that lands with particular force on SAP given its vast customer base.
Klein's "Once-in-a-Lifetime" Pitch
The AI narrative offers a counterweight. CEO Christian Klein, speaking at the Goldman Sachs event, described the opportunity in artificial intelligence as a "once-in-a-lifetime" one, according to Reuters — language that underscores SAP's ambition to position itself as the infrastructure layer for enterprise-wide AI deployments. The 400 agents promised for September are the first installment; a second wave is expected in the autumn.
SAP is also leaning into customer-facing events to sell the story. A webinar scheduled for September 22 carries the title "Now, the suite moves from announcement to execution," signaling a shift from rhetoric to delivery on its suite strategy. Earlier in the month, on September 9 and 10, the SAP NOW AI Tour Brazil 2026 was set for São Paulo, with artificial intelligence, data management, and business transformation topping the agenda.
Should investors sell immediately? Or is it worth buying SAP?
Operational proof points have surfaced too. Irish dairy cooperative Tirlán, working with SAP, built an independent SAP landscape in just nine months. The transition ran without interruption after Tirlán separated from former partner Glanbia — a reference case SAP is happy to showcase as evidence that its migration projects can deliver on time and without disruption.
A Regulatory Shadow from Across the Industry
Regulatory attention hasn't disappeared, though this time it lands indirectly. Reuters reported that Oracle's licensing practices have drawn scrutiny from EU antitrust authorities — a case with echoes of proceedings against SAP that were settled in July with concessions.
The Market's Verdict: A Stock Under Pressure
The equity has struggled to reconcile the mixed news flow. SAP shares recently changed hands at EUR 177.98, down roughly 4.4% on the week. The year-to-date decline stands at 15%, and over twelve months the stock has shed 20%. Measured against the 52-week high of EUR 242.00 set last October, the paper now sits 26% below its peak.
Analyst sentiment has shifted as well. On Wednesday, August 26, UBS downgraded SAP from "Buy" to "Neutral" while simultaneously lifting its price target from EUR 164 to EUR 201. The bank cited slower-than-expected implementation of customer AI projects and weakening cloud growth as reasons for the move. Shares came under pressure in the aftermath, with market watchers pointing not only to the downgrade but also to broader drags such as oil-price and interest-rate worries. That downgrade is now two weeks old and can no longer be read as a fresh trigger for current price action.
The most recent session offered little relief: SAP closed Wednesday at EUR 180.18, down 0.9% on the day. Over twelve months the decline is 19%, and since the start of the year the stock has lost 14%. The gap to the October 2025 high of EUR 242.00 remains 26% — a stark measure of how far the company's valuation has retreated.
For investors, the picture resists easy resolution. Recurring security gaps threaten to erode trust, while the AI offensive is being staged as the growth engine of the future. Whether those contradictions resolve in the coming weeks will likely hinge on whether the promised autumn wave of agents translates into measurable customer demand — and whether the patch cycle stops generating headlines of its own.
Ad
SAP Stock: New Analysis - 10 September
Fresh SAP information released. What's the impact for investors? Our latest independent report examines recent figures and market trends.
