I know something like this already exists somewhere, and absolutely open to learning better ways:

https://github.com/mubix/Find-WSUS

For finding what might be affected by CVE-2025-59287 or you can use an EDR / OSQuery to find systems with the WSUSService service.