A warning has been issued by the Israel National Cyber Directorate about a critical remote code execution flaw in the Drupal content management system.