Resolved! Patch Tuesday report showing wrong results
I ran the patch tuesday report (september) against my updated servers, and a big chunk of them shows kbKB5005573 as not installed.The update IS installed on the servers, and the machines were scanned 3 days after the update was installed.