As of this writing, the latest firmware is 11.9.0-42.
See here regarding running homebrew.
Software-based full system control exploits are known and publicly available for system versions up to and including 11.8.0-41, while ntrboothax allows for ARM9 arbitrary code execution on any 3DS-family console regardless of system firmware version (or even its presence at all).