SAP is trading 3.38% down at €176.68 after researchers disclosed two critical, unauthenticated vulnerabilities affecting SAP kernel and NetWeaver components.

  • OVERPASS carries a CVSS score of 10.0; S4GET is rated 9.8, with successful exploitation potentially enabling remote command execution and full system compromise.
  • The September 9, 2026 disclosures likely intensified investor concern about customer security and remediation costs.
  • Broader geopolitical and inflation pressure also weighed, but the SAP-specific security news is the clearest direct catalyst.