Facebook patches critical server remote code execution vulnerability