$SAP

SAP SE

9
11
7

No SEC Form 4 filings for $SAP in the last 30 days.

See all $SAP insider activity →
Low

SAP Cloud SDK for Python Lets Attackers Steal OAuth2 Credentials Through a Tenant Subdomain Input — CVSS 10.0

SAP Cloud SDK for Python has a critical vulnerability (CVE-2026-89111, CVSS 10.0) allowing attackers to steal OAuth2 credentials via tenant subdomain manipulation. The flaw affects multi-tenant SAP BTP applications. A fix was released in August 2026, but later versions reintroduced the issue. The vulnerability existed since the SDK's initial release in March 2026.

Cloud Services Superstar Lemongrass Takes A Lead In Developing AI Agents for SAP Environments

Lemongrass, a cloud and SAP services provider, announced it has developed 24 AI agents for SAP environments, nearly a fifth of all partner agents on SAP Discovery Center. The company sees AI agents as key to helping businesses achieve a 'clean core' SAP architecture and improve AI operations. Lemongrass is an SAP Gold partner and offers services to implement and operationalize these agents, aligning with SAP's strategy and migration projects.

SAP Stocks Slip Although TD Cowen Lifts Target 22%

TD Cowen raised its price target for SAP to $250, up 22%, while maintaining a Buy rating. SAP's shares traded at $224.33, down 0.30%. Q2 cloud revenue grew to €6.281B, but software-support revenue fell to €2.439B. Cloud backlog reached €22.929B. P/E ratio is 28.2, and GF Score is 90/100.

SAP sentiment & insider activity

Over the past 7 days, AlphAI's AI scored 27 news stories mentioning SAP (SAP SE). Coverage has skewed bullish: 9 bullish, 11 neutral, and 7 bearish.

Recent SAP coverage spans technology, regulation and earnings.

What's driving SAP

AlphAI scores every news story that mentions SAP with an AI model for sentiment and relevance, and aggregates insider trades from SAP SE's SEC EDGAR Form 4 filings. Figures refresh continuously.

News on $SAP

Score
$SAPLow

SAP Cloud SDK for Python Lets Attackers Steal OAuth2 Credentials Through a Tenant Subdomain Input — CVSS 10.0

SAP Cloud SDK for Python has a critical vulnerability (CVE-2026-89111, CVSS 10.0) allowing attackers to steal OAuth2 credentials via tenant subdomain manipulation. The flaw affects multi-tenant SAP BTP applications. A fix was released in August 2026, but later versions reintroduced the issue. The vulnerability existed since the SDK's initial release in March 2026.

$SAPLow

Cloud Services Superstar Lemongrass Takes A Lead In Developing AI Agents for SAP Environments

Lemongrass, a cloud and SAP services provider, announced it has developed 24 AI agents for SAP environments, nearly a fifth of all partner agents on SAP Discovery Center. The company sees AI agents as key to helping businesses achieve a 'clean core' SAP architecture and improve AI operations. Lemongrass is an SAP Gold partner and offers services to implement and operationalize these agents, aligning with SAP's strategy and migration projects.

$SAPLow

SAP Stocks Slip Although TD Cowen Lifts Target 22%

TD Cowen raised its price target for SAP to $250, up 22%, while maintaining a Buy rating. SAP's shares traded at $224.33, down 0.30%. Q2 cloud revenue grew to €6.281B, but software-support revenue fell to €2.439B. Cloud backlog reached €22.929B. P/E ratio is 28.2, and GF Score is 90/100.

AI safety worries multiply but everyone's still racing full speed ahead

Government officials and tech experts are calling for AI regulation amid safety concerns. OpenAI faces lawsuits over harm to children. Investors worry about AI revenue growth slowdown, impacting companies like Anthropic. AI firms like Nvidia and Meta continue advancing models, while suppliers debut scaling technologies. Tech earnings season begins next week with key players like Netflix, Tesla, and Meta.

$SAPLow

SAP Ireland pays €157m dividend after Citywest merger

SAP Ireland, a subsidiary of German software giant SAP, merged three entities and paid a €157m dividend in 2025. The combined companies employ around 2,000 people and reported €881m in revenue and €499m in operating profits. SAP has operated in Ireland for nearly 30 years, serving global clients.

Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks

Hackers exploited flaws in D-Link, Ubiquiti, and SAP products to compromise 143 devices in 34 countries, installing proxy software without consent. GreyNoise linked the campaign to actor 'skynox7,' using vulnerabilities in D-Link NAS, Ubiquiti NVRs, and SAP NetWeaver. The affected products include D-Link ShareCenter, Ubiquiti UniFi Video, and SAP NetWeaver Visual Composer.

CVE-2026-89111, CVSS 10 vulnerability in SAP's Python SDK

SAP disclosed a critical CVSS 10 vulnerability (CVE-2026-89111) in its Python SDK, allowing attackers to steal OAuth credentials. The flaw was fixed in version 0.45.2, released August 21, 2026, with the advisory published October 13. Affected versions are those released before 0.45.2, with additional fixes in subsequent versions. SAP initially described the fix as a bug fix, not mentioning security implications.

Related tickers