SAP Stock Under Dual Pressure: IBM’s Hardware Rotation and Critical Security Patches Test the Floor

SAP shares are clinging to within 4% of their 52-week low as two distinct headwinds converge: a sector-wide shift in corporate IT spending toward hardware and a batch of critical security patches that raise operational noise. The stock, trading near €136, has shed roughly 33% since January, and with second-quarter earnings due July 23, investors are bracing for either a catalyst or a further slide.

The IBM Contagion: Why Software Is Getting Sidelined

Wall Street’s attention snapped to Armonk on Tuesday when IBM reported just 1% revenue growth for the second quarter, a figure that landed below expectations. Underlying the miss was a pronounced pivot by enterprise customers: they are funneling budgets into servers and storage to lock in capacity before “chipflation” and AI-component shortages drive prices higher. This hardware-first strategy starves software and cloud projects of funding, and the ripples have hit the entire sector.

SAP closed Tuesday at €135.92, leaving it within striking distance of its 52-week trough. The company’s market capitalization of €164.32 billion already reflects a substantial discount, yet the technical picture offers little comfort. The relative strength index sits at 42.9–43.0, shy of oversold territory but tilted bearish, while the stock trades 23.5% below its 200-day moving average. The 50-day average of €145.29 marks a key resistance level for any recovery attempt.

Three Critical Holes in a Tense Atmosphere

The same week that IBM rattled the sector, SAP released its monthly patch bundle on July 14, fixing 16 vulnerabilities. Three of them are rated critical. The most severe affects the NetWeaver Application Server ABAP—the backbone of many SAP installations—carrying a CVSS score of 9.9, the highest possible. The flaw stems from an out-of-bounds write error in memory management, and while SAP has not detected active exploitation, the patch requires customers to deactivate certain ICF nodes, which can impair functionality.

A second critical vulnerability strikes the AppRouter middleware (CVE-2026-27690), an HTTP request-smuggling issue exploitable remotely without authentication. The third targets the Commerce Cloud (CVE-2026-44761), with a CVSS score of 9.1, caused by insecure default credentials. Security experts urge companies to deploy the patches quickly, especially given that the U.S. cybersecurity agency CISA has added 14 SAP vulnerabilities to its known-exploited list since November 2021. For SAP, the operational burden is real, but the strategic impact remains limited—unless a breach emerges just as the company needs to reassure investors.

Should investors sell immediately? Or is it worth buying SAP?

Analysts Cut Targets but See a Path to Recovery

The deteriorating backdrop has prompted analyst revisions. UBS lowered its price target for SAP from €205 to €164, though it maintained a Buy rating, reflecting a recalibration of growth and margin assumptions rather than a fundamental loss of faith. Berenberg, meanwhile, still sees meaningful upside, arguing that companies currently stocking up on AI hardware will eventually require advanced software to translate that hardware into productivity gains. That delayed lift could provide a tailwind for SAP.

Yet the market’s immediate concern is whether the hardware rotation proves temporary or structural. If persistent high costs for DDR5 memory and HBM modules keep IT budgets tilted toward infrastructure, SAP may struggle to sustain its cloud momentum. The July earnings call will be the first real test: management will need to address whether the IBM-induced slowdown is visible in their own pipeline and whether cloud order growth remains intact.

Two Levels That Will Decide the Next Move

Technically, the €130.80 support level is the line in the sand. If SAP holds above it, a bounce toward the 50-day average near €145 remains plausible. A decisive break below that floor, however, could open the door to a test of the 52-week low and invite heavier sell pressure. That threshold will be tested before July 23, during a period of elevated volatility—the 30-day annualized volatility sits at 36.5%.

The earnings report itself is the true inflection point. Investors will scrutinize the cloud backlog and operating margin with unusual intensity. If SAP can demonstrate that its enterprise software retains its stickiness—companies cannot simply cancel ERP systems like add-on tools—the stock may carve out a base. But if the numbers echo IBM’s cautionary tone, the already fragile sentiment could break. For now, SAP is caught between a sector rotation that punishes software and the hope that its deep operational role in the global economy will eventually reassert itself.