diff --git a/components/camel-aws/camel-aws2-kinesis/pom.xml b/components/camel-aws/camel-aws2-kinesis/pom.xml
index d878d5f89ef96..e0b7c307184cb 100644
--- a/components/camel-aws/camel-aws2-kinesis/pom.xml
+++ b/components/camel-aws/camel-aws2-kinesis/pom.xml
@@ -32,6 +32,26 @@
     <name>Camel :: AWS2 Kinesis</name>
     <description>Consuming and Producing data to AWS Kinesis Service</description>
 
+    <dependencyManagement>
+        <dependencies>
+            <!-- Pin com.squareup.wire:wire-runtime transitively brought in by amazon-kinesis-client
+                 via software.amazon.glue:schema-registry-serde (still on Wire 5.2.0, no release with
+                 the fix) to remediate CVE-2026-45799. wire-runtime is an empty Kotlin-Multiplatform
+                 stub and wire-runtime-jvm carries the fix; both are pinned because the advisory lists
+                 both coordinates. -->
+            <dependency>
+                <groupId>com.squareup.wire</groupId>
+                <artifactId>wire-runtime</artifactId>
+                <version>${squareup-wire-version}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.squareup.wire</groupId>
+                <artifactId>wire-runtime-jvm</artifactId>
+                <version>${squareup-wire-version}</version>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <dependencies>
         <dependency>
             <groupId>org.apache.camel</groupId>
diff --git a/parent/pom.xml b/parent/pom.xml
index 0052d902c6e2e..8c20e7c018706 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -507,6 +507,7 @@
         <sql-maven-plugin-version>3.0.0</sql-maven-plugin-version>
         <squareup-okhttp5-version>5.5.0</squareup-okhttp5-version>
         <squareup-okio-version>1.17.5</squareup-okio-version>
+        <squareup-wire-version>6.4.7</squareup-wire-version>
         <sshd-version>2.19.0</sshd-version>
         <stompjms-version>1.19</stompjms-version>
         <stripe-java-version>33.4.0</stripe-java-version>