I use this PowerShell script to find machines with failed Windows updates installation in the Software Center.
$failedUpdate = Get-WmiObject -Class CCM_SoftwareUpdate -Filter EvaluationState=13 -Namespace root\CCM\ClientSDK
if ($failedUpdate){
Write-Host "Updates found, Failed"
}
else{
Write-Host "No failed update"
}