As of this writing, the latest firmware is 11.9.0-42.
See here regarding running homebrew.
Software-based full system control exploits are known and publicly available for system versions up to and including the latest firmware shown above, while ntrboothax allows for ARM9 arbitrary code execution on any 3DS-family console regardless of system firmware version (or even its presence at all).