As of this writing, the latest firmware is 11.16.0-48.
See here regarding running homebrew.
Software-based full system control exploits are known and publicly available for system versions up to and including 11.14.0-46, while ntrboothax allows for ARM9 arbitrary code execution on any 3DS-family console regardless of system firmware version (or even its presence at all).